4 ms·
> But I can't accidentally let the user read or write arbitrary memory locations. Many of the languages you mention contain an 'eval' method, and most use env
by akira2501 11y ago
> But I can't accidentally let the user read or write arbitrary memory locations.
Many of the languages you mention contain an 'eval' method, and most use environment variables in less than transparent ways. I wouldn't be so sure of this claim.
- masklinn 11y agoUsing eval is not accidental.
- akira2501 11y agoYes, it easily can be. My point was, no language allows you to get away with ignoring security (e.g. there is no free lunch). http://blog.codeclimate.com/blog/2013/01/10/rails-remote-code-execution-vulnerability-explained/ http://blog.codeclimate.com/blog/2013/01/10/rails-remote-cod...