Melchior FRANZ wrote: > It's well known that Nasal has an io module with wrappers around > fopen(), fclose(), etc. An aircraft that you install, or even > scenery objects with embedded Nasal could in the past use this > to delete the contents of your whole home directory, or to append > commands to ~/.bashrc, and thus execute code next time you open > a shell!
I must admit I haven't follow the thread completely, but I think the number of occasions where one would allow FlightGear to write anything to the disk is so small that it might be better to handle those cases with internal functions. In other words; Scripts are allowed to read anything but can only write using predefined functions. (What are the reasons to write to a file anyway?) Erik ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Flightgear-devel mailing list Flightgear-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/flightgear-devel
