From: Carlos <angus@...>
Date: 2004-02-22T11:49:17+09:00
Subject: Re: tainted symbols?

>>$SAFE=1
>>
>>ut = "'Hello world'" # untainted string
>>us = ut.intern      # untainted symbol
>>
>>t = gets.chomp # -> happens to be 'Hello world'
>>s = t.intern   # tainted
>>
>>now 'us' points to a tainted symbol... I think that would be
>>undesirable...
>>
> 
> 
> I'm not quite sure what you are trying to point out here. In the above
> example 'us' would always be untainted. To my mind 'us' should have the same
> taint that the string it was created from had.

'us' and 's' refer to the same object.

Symbols are like Fixnums; there is only one object for each different 
symbol. So, "aa".id != "aa".id, but "aa".intern.id == "aa".intern.id.