> Hi,
> it's much worse. If Untrusted doesn't have Do, it can use If, Else,
> Use, While,...lots of other possibilities.
> Instead of load Untrusted can use:
> ld: get to word! "load"
> Moreover, Replace is not enough to clear Untrusted.
> The moved System is a higher obstacle.
> foreach nope ["load" "bind" "do"][ > replace/all script nope
> "none" ]
Well, after the replace/all the untrusted script would be
doing this:
ld: get to word! "none"
But granted, you could always do:
ld: get to word! trim/all "l o a d"
So, moving away the system object is probably the thing to do if
you're worried about tracking the impact of executing an untrusted
script :-) Of course, there's also load/next and do/next which will
let you incrementally determine when a script is going to modify the
environment, which can be combined with query of the system/words.
There is a good deal of fine grained control options for dealing with
a random script.
Modules are definitely the eventual real answer here though..
-jeff
