On Mon, Dec 7, 2009 at 3:34 PM, Sherlock, Ric <[email protected]> wrote:
> Yes I was about to reply to Raul's suggested solution
> ( >./ 5 */\ "."0 data ) that I had an uneasy feeling using
> Do (monadic ". ) to convert strings to numbers, when I
> realised that was exactly what ,.&.": was doing:
>   ": b. _1
> ".

Note that "."0 can never execute arbitrary code, for the
reason that Dan Bron mentioned -- "0 means verbs (and
adverbs and conjunctions) can receive no arguments.

That said, a hand crafted argument to ,.&.": could
be made to execute arbitrary code.  But mostly
this just means that web facing code needs to carefully
constrain the rank and domain of its arguments.

-- 
Raul
----------------------------------------------------------------------
For information about J forums see http://www.jsoftware.com/forums.htm

Reply via email to