On Wed, 2007-04-25 at 00:31 -0500, Charles Oliver Nutter wrote: > Barring any special way to support this that I've missed, I'd suggest we > consider doing the following (not before 1.0): > > - Remove safe levels and tainting and all checks for either. taint? will > always return false. > - Map safe-level modification to appropriate java security context > alterations to provide similar security, like for launching external > processes, accessing external files, and so on. Potentially use security > context for additional $SAFE-related checks as appropriate without > affecting performance.
It's probably also worth noting that sandbox is the better $SAFE. -mental
signature.asc
Description: This is a digitally signed message part
