[REBOL] Re: load and mold/all security issue
From: nitsch-lists:netcologne at: 24-Sep-2003 16:57
Am Mittwoch, 24. September 2003 13:59 schrieb Romano Paolo Tenca:
> Hi, all
>
> try:
>
> o: context [a: 1 b: func [][a]]
> o/b ;==1
>
> ;and then
>
> o2: load mold/all o
> o2/b
> ** Script Error: a word has no context
> ** Where: b
> ** Near: a
>
> Function body is not binded against the object context.
> Feedback answered to me that this happens for security reason.
>
> Can someone explain it to me? I do not understand where is the security
> problem.
>
binding against global context would be a problem.
someone sends you data. you load it. you expect something like
o: context [ a: 1 b: 2]
you code "do-something-with o/a"
somebody sends you
o: context[ a: 1 b: func[][ take-over-system ] ]
..
> ---
> Ciao
> Romano
-Volker
