News for hackers. Stuff that matters.
Re:Ruby Fiddle: Ruby Snippets in the Browser by huk on Thursday June 14, 2012 @09:54AM (#4111327)
Is there any security mechanism, which not allow execute external commands (for example `rm -Rf *`)?
Re:Ruby Fiddle: Ruby Snippets in the Browser by jwo on Thursday June 14, 2012 @10:07AM (#4111382)
Heroku provides a read-only file system on their Bamboo stack, and a "scratch-pad" file system on their Cedar stack where changes are thrown away after the web request finishes.
Re:Ruby Fiddle: Ruby Snippets in the Browser by huk on Thursday June 14, 2012 @10:08AM (#4111392)
Thanks, I didn't know that.
Re:Ruby Fiddle: Ruby Snippets in the Browser by KevinSjoberg on Thursday June 14, 2012 @10:06AM (#4111380)
I guess the user account has restricted access in what commands are available.
Re:Ruby Fiddle: Ruby Snippets in the Browser by jevans on Thursday June 14, 2012 @12:26PM (#4112100)
exec('sudo cat /etc/shadow') => RestrictedCodeException System Calls disabled

Also, while File.read('/etc/passwd') works, at least File.read('/etc/shadow') doesn't.