#6017: Reading ./.ghci files raises security issues
-------------------------------+--------------------------------------------
  Reporter:  nomeata           |          Owner:                  
      Type:  task              |         Status:  new             
  Priority:  high              |      Milestone:  7.8.1           
 Component:  GHCi              |        Version:  7.4.1           
Resolution:                    |       Keywords:                  
        Os:  Unknown/Multiple  |   Architecture:  Unknown/Multiple
   Failure:  Other             |     Difficulty:  Unknown         
  Testcase:                    |      Blockedby:                  
  Blocking:                    |        Related:                  
-------------------------------+--------------------------------------------
Changes (by igloo):

  * owner:  pminten =>
  * status:  patch => new


Comment:

 How do you conditionally source a script from the `~/.ghci` file?

 But that makes me think: why don't we make ghci never execute anything
 other than `~/.ghci`? People who want that functionality can just put
 something like `:source .ghci_cmds` in their `~/.ghci`, and then the
 security implications are not our problem.

-- 
Ticket URL: <http://hackage.haskell.org/trac/ghc/ticket/6017#comment:9>
GHC <http://www.haskell.org/ghc/>
The Glasgow Haskell Compiler

_______________________________________________
Glasgow-haskell-bugs mailing list
Glasgow-haskell-bugs@haskell.org
http://www.haskell.org/mailman/listinfo/glasgow-haskell-bugs

Reply via email to