# [SERVER, SECURITY] bug in set_task_perms() ?

"Nate Massey" (natem@ctdnet.acns.nwu.edu)
Sat, 23 Sep 1995 10:09:32 PDT

- Messages sorted by:[ date ][ thread ][ subject ][ author ]

    > In all of my verbs, to test top level-ness, I just make the quick and
    > tick-friendly check 'if (valid(caller))'.  A wiz can fool caller_perms(),
    > but can't fool the variable 'caller'.

    Actually, any programmer can fool the variable caller.  Check it out:

    ;eval("return caller;")
    => {1, #-1}

    So they could just call your verb with eval().

    --Nate