Postscript interpreters also have the ability to execute rm *.
The difference is that postscript interpreters have a command line option
to turn off file system access capabilities.
Is there a command line option in hugs to disallow import of System?

-Alex-


On Wed, 25 Aug 1999, Koen Claessen wrote:

> On Tue, 24 Aug 1999, Fritz K Ruehr wrote:
> 
>  | I just convinced my local sysadmin to attach a new MIME type to
>  | outgoing Haskell programs sent by our web server, namely
>  | "application/x-haskell".
>  :
>  | My goal in this is to get a browser to launch Hugs/Winhugs on the
>  | podium machine where I make lectures whenever I click on a link to
>  | Haskell code.
> 
> I am not sure if this is such a good idea.
> 
> How about if I put the following Haskell program on my webpage:
> 
>   import System
>   main = system "rm *"
> 
> I don't think you really want to click on that one...
> 
> Microsoft has already allowed for introduction of lots of
> "viruses" because their web applications allow starting up
> arbitrary MS Word scripts...
> 
> Regards,
> Koen.
> 
> --
> Koen Claessen         http://www.cs.chalmers.se/~koen     
> phone:+46-31-772 5424      e-mail:[EMAIL PROTECTED]
> -----------------------------------------------------
> Chalmers University of Technology, Gothenburg, Sweden
> 

___________________________________________________________________
S. Alexander Jacobson                   Shop.Com
1-212-697-0184 voice                    The Easiest Way To Shop



Reply via email to