On Sat, 06 Mar 2004 01:57:49 +0900, ts wrote: >>>>>> "S" == Simon Strandgaard <neoneye / adslhome.dk> writes: > > S> value = "evil" > S> p value.tainted? > S> code = "value.upcase!" > S> code.taint > S> p code.tainted? > > $SAFE = 1 > > S> eval code > S> p value.tainted? > Then it raises as its suppose to.. a.rb:7:in `eval': Insecure operation - eval (SecurityError) from a.rb:7 However in $SAFE=0, shouldn't eval propagate ? Just wondering. -- Simon Strandgaard