Walter Bright wrote:
Georg Wrede wrote:
I mean, how often do you see web sites where stuff is fed to a C
compiler and the resulting programs run????? (Yes it's too slow, but
that's hardly the point here.) That is simply not done.
Consider the Java JVM. You've probably got one installed on your
computer. It gets java code from gawd knows where (as the result of web
browsing), it compiles it, and runs it on your machine unbeknownst to you.
.NET does that too.
Every day my browser downloads javascript code, compiles it, and runs it.
There's no reason in principle that D could not be used instead.
This means that we should think about security issues. Compiling
untrusted code should not result in an attack on your system.
http://www.comeaucomputing.com lets you upload random C++ code, compile
it on their system, and view the messages put out by their compiler.
Suppose you did it with D, had it import some sensitive file, and put it
out with a pragma msg statement?
Your compiler can do the same:
http://codepad.org/hWC9hbPQ
