3 ms·
Catching exceptions from eval-ing untrusted code doesn't strike me as being a big help from security POV, or is there something else special about the block for
by fulafel 3y ago
Catching exceptions from eval-ing untrusted code doesn't strike me as being a big help from security POV, or is there something else special about the block form of eval that helps here?
- _flux 3y agoBlock form is not intended to run untrusted code, it is used similar to how exception handling is used in some languages: perl -e 'eval { die "aiee" }; print "problem: $@"'