Hi,

how can "unsafe" tcl commands be removed or disabled? I think this would be
done before compiling Tcl, so that they are disabled at that level...
Reason is to protect (better) against someone that is able to infiltrate code
fragments to the running webserver.

Or could/should  that best be done with some kind of module that disables the
commands  at startup?

Thanks,
Bernd.

Reply via email to