suzanne.soy/racket
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

do not trust require spec from user code

Browse Source 
svn: r7343
This commit is contained in:
Eli Barzilay 2007-09-15 07:09:06 +00:00
parent 45649900e7
commit eb72a0dd93
1 changed files with 8 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
collects/tests/mzscheme/sandbox.ss
View File

@ -245,13 +245,14 @@
(directory-list "/tmp") =err> "file access denied"
--top--
;; should work also for module evaluators
(set! ev (make-evaluator `(module foo mzscheme
(require (file ,test-lib)))))
--eval--
x => 123
(length (with-input-from-file ,test-lib read)) => 5
;; the directory is still not kosher
(directory-list "/tmp") =err> "file access denied"
;; --> NO! Shouldn't make user code require whatever it wants
;; (set! ev (make-evaluator `(module foo mzscheme
;; (require (file ,test-lib)))))
;; --eval--
;; x => 123
;; (length (with-input-from-file ,test-lib read)) => 5
;; ;; the directory is still not kosher
;; (directory-list "/tmp") =err> "file access denied"
--top--
;; explicitly allow access to /tmp
(set! ev (let ([rx (if (eq? 'windows (system-type))