find-dynamic-extension in eval.scm looks like this
(let loop ((paths
(##sys#append
(if ##sys#setup-mode '(".") '())
(or rp '())
(if inc? ##sys#include-pathnames '())
(if ##sys#setup-mode '() '(".")))))So no matter what I do at user level, I can't get "." off the search path for dynamically-loaded code. Loading code from CWD is a well-known security footgun. Could this inclusion of "." be suppressed somehow, or, ideally, not done by default?
