Allowing relative file imports
grauzone
none at example.net
Thu Mar 26 22:53:35 PDT 2009
Walter Bright wrote:
> Georg Wrede wrote:
>> I mean, how often do you see web sites where stuff is fed to a C
>> compiler and the resulting programs run????? (Yes it's too slow, but
>> that's hardly the point here.) That is simply not done.
>
> Consider the Java JVM. You've probably got one installed on your
> computer. It gets java code from gawd knows where (as the result of web
> browsing), it compiles it, and runs it on your machine unbeknownst to you.
>
> .NET does that too.
>
> Every day my browser downloads javascript code, compiles it, and runs it.
>
> There's no reason in principle that D could not be used instead.
>
> This means that we should think about security issues. Compiling
> untrusted code should not result in an attack on your system.
>
> http://www.comeaucomputing.com lets you upload random C++ code, compile
> it on their system, and view the messages put out by their compiler.
> Suppose you did it with D, had it import some sensitive file, and put it
> out with a pragma msg statement?
Your compiler can do the same:
http://codepad.org/hWC9hbPQ
More information about the Digitalmars-d
mailing list