On 02/25/2018 07:35 AM, Amirouche Boubekki wrote:
I have procedures like that in my program: (define-public (scm->string scm) (call-with-output-string (lambda (port) (write scm port)))) (define-public (string->scm string) (call-with-input-string string read)) Is it safe to pass to this procedures input from third parties? TIA!
maybe check (ice-9 sandbox), explained in section 6.18.12 of the 2.2.3 manual