Skip to content

new constants have security problems #35

Open
@ghost

Description

This is why inspect sometimes doesn't work. There are probably a lot of other problems it creates too.
Here is a tryruby session:
>> 6.tainted?
=> false
>> /slash/.tainted?
=> false
>> TryRubyBaseSession.tainted?
=> false
>> class MyClass; end
=> nil
>> MyClass.tainted?
=> true
>> MyClass.new.tainted?
=> true
>>

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions