Changeset 4775 for src/Pugs/Prim/Eval.hs

Timestamp:

06/18/05 03:39:00 (4 years ago)

Author:

putter

svk:copy_cache_prev:

6529

Message:

Modified src/Pugs/Prim/Eval.hs to leave %*INC support commented out by default. Its too late at night to make security judgements.

Files:

• src/Pugs/Prim/Eval.hs (modified) (2 diffs)

src/Pugs/Prim/Eval.hs

@@ -44 +44 @@
             then requireInc ps file msg
             else do
+{-
                 -- XXX security issue?  only if you _can_ create a filename,
                 -- but _cant_ control its contents.  Yes?
@@ -50 +51 @@
                                            ++ "}} = q{"
                                            ++ (decodeUTF8 pathName) ++ "};")
+-}
                 str <- liftIO $ readFile pathName
                 opEval style pathName (decodeUTF8 str)