
[Date Prev][Date Next][Thread Prev][Thread Next][Interchange by date
][Interchange by thread
]
Re: [ic] mv_credit_card_reference
Quoting Javier Martin (martin@trymedia.com):
> Maybe the $Tag->some_tag calls from [perl]...[/perl] should be run through
> Safe::Hole?
It is. Allowing a runtime require is the one thing Safe::Hole can't help
with. After all, the whole object of Safe is not to allow arbitrary code
to be executed, and if you can do "require SomeRandomModule" at runtime
that is broken.
--
Red Hat, Inc., 3005 Nichols Rd., Hamilton, OH 45013
phone +1.513.523.7621 <mheins@redhat.com>
Fast, reliable, cheap. Pick two and we'll talk. -- unknown
_______________________________________________
interchange-users mailing list
interchange-users@interchange.redhat.com
http://interchange.redhat.com/mailman/listinfo/interchange-users