Hi,
In message "Re: [ruby-core:44062] [ruby-trunk - Feature #5455] $SAFE should be removed"
on Mon, 2 Apr 2012 17:43:47 +0900, "nahi (Hiroshi Nakamura)" <nakahiro / gmail.com> writes:
|> I don't know why you are so eager to remove it. It's not part of "the
|> spec". It's CRuby's implementation dependent feature. Why bother?
|
|Though you might be thinking I'm on a JRuby side now, my concern is not on "the spec". The reason why I want to remove $SAFE from CRuby (not the spec) is that it's hard to implement properly. CRuby applications that depends on $SAFE should check if all possible third-party C extensions honor $SAFE.
|
|Shugo said that it should be removed from "2.0" first at [ruby-dev:44554].
|
|That said, I agree that Endoh-san want to postpone this to 3.0 now. I'll revert my "Target version" change. But feel free to discuss about this now :)
It's still useful for advisory. Especially $SAFE=1. Since I don't
trust myself, I don't claim $SAFE=4 is secure. So I can agree with
removing $SAFE=4 feature.
Do you have any plan for "replacement"?
matz.