[730] in Coldmud discussion meeting
Possible security hole or something
daemon@ATHENA.MIT.EDU (Mon Apr 3 22:19:53 1995
)
From: crag@serial.MIT.EDU (Robert de Forest )
To: coldstuff@MIT.EDU
Date: Mon, 3 Apr 1995 20:55:06 -0500 (CDT)
Right now parents can add and delete methods on children. This is necessary
in order to allow root to define behaviors of all objects. If you are working
in an environment where builders of parent objects may or may not be trusted
this can be a bad thing. I would like to think about restricting these and
other functions to $sys.
I guess Brandon's proposal to 'bind' functions sorta helps with this but we'll
need to add paramers to things so it will be compile(code, object, name), for
example.