From: ts <decoux@...>
Date: 2004-05-11T01:52:49+09:00
Subject: Re: safe eval?

>>>>> "A" == Ara T Howard <Ara.T.Howard@noaa.gov> writes:

A> 1) eval

[...]

A>  2) code generation using ruby to evaluate (this protects against evil
A>  evals) 

 If you really think that you are protected against the evil eval then just
 try 

A>     request = 'a < 42 and b == true'

       request = '(a < 42 && b == true; %x{ls})'

 then replace ls with what you want ...

 Use $SAFE = 4 in a new thread


Guy Decoux