Thank you, Rick and Josep Maria, for your comments.

Your respective points below were addressed in an email I sent this morning at 
10:23 AM French time.
A patch and a test was attached.

Could someone confirm that this email has been received by the group?
I don't see it in SourceForge.



> On 15 Nov 2025, at 14:28, Rick McGuire <[email protected]> wrote:
> 
> I should point out that having a builtin function that allows setting the 
> security manager is itself a security problem. 

+1


> 
> On Sat, Nov 15, 2025 at 7:55 AM Josep Maria Blasco 
> <[email protected] <mailto:[email protected]>> wrote:
>> 
>> If this carries over to all calls and ::Requires, recursively, this would be 
>> wonderful.
>> Having to reinstall the security manager after every call is a real nuisance.

Yes, a security manager set on the interpreter becomes the default security 
manager everywhere.
Nothing resursive.

>>  
>>> I noticed that when used alone (i.e. no security manager on routine, the 
>>> LOCAL and ENVIRONMENT checkpoints are missing.
>>> It's probably because there is no fallback to the default (i.e. 
>>> interpreter's) security manager.
>>> Same remark for NativeCode.
>> 
>> Maybe these fallbacks could be added? Then we would have a quite complete
>> implementation of sandboxes, with a single call to the new BIF. 

Yes, this issue has been resolved.
All checkpoints are now enabled.

_______________________________________________
Oorexx-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/oorexx-devel

Reply via email to