Mario Domenech Goulart scripsit:

> b. Drop ##sys#expand-home-path.  Do not implicitly expand ~ and
>    environment variables in pathnames.  Provide a procedure to expand ~
>    in pathnames.  That's what this patch implements.

I suggest:

  b2. Keep ##sys#expand-home-path, but make it the identity function.
      Provide a procedure to expand ~ in pathnames.

That way, the security problem is removed, but we do not have to find
and fix every reference to ##sys#expand-home-path.

-- 
John Cowan   http://ccil.org/~cowan    co...@ccil.org
We want more school houses and less jails; more books and less arsenals;
more learning and less vice; more constant work and less crime; more
leisure and less greed; more justice and less revenge; in fact, more of
the opportunities to cultivate our better natures.  --Samuel Gompers

_______________________________________________
Chicken-hackers mailing list
Chicken-hackers@nongnu.org
https://lists.nongnu.org/mailman/listinfo/chicken-hackers

Reply via email to