On May 25, 2005, at 12:05 PM, Richard Gaskin wrote:

SecureMode is documented -- it's a global which governs whether the engine will have access to file I/O, AppleScript, shell, etc.

Anybody can say "This app is based on a Revolution stack and it sets secureMode at startup". Anybody can lie.

What is needed is some way to exploit the -f or some other way to create the environment. The user needs to be the one who controls whether a stack is run in an app in secure mode.

One can make an app that does set SecureMode and opens the specified stack. It is awkward having to open a stack in a separate app, though. Right now, Revolution Online stacks are not opened by a separate app or in any sandbox.

The only documentation I know of is the dictionary entry.

I don't know if/how/when the IDE breaks if secureMode is set.

(And not all file I/O is blocked, I think.)

Dar

--
*****
Dar Scott
Dar Scott Consulting
[EMAIL PROTECTED]
<http://www.swcp.com/dsc/>

Home, Lab & Office: +1 505 299 9497
Cell:                           +1 505 350 6953
Fax:                            Call first.

8637 Horacio Place NE
Albuquerque, NM 87111
USA

Dar Scott Consulting provides software development services.

*****

_______________________________________________
use-revolution mailing list
[email protected]
http://lists.runrev.com/mailman/listinfo/use-revolution

Reply via email to