On Fri, Oct 3, 2008 at 10:43 PM, Arnaud Cornet <[EMAIL PROTECTED]> wrote: > I can have libtidy-ruby work correcly at least on some cases. So this > probably needs more information on how to reproduce. > > Typically, in the source package, running test/usage.rb instanciates a > Tidy object and does not raise any security exception.
Yes, I forgot to mention that it happens on SAFE level 1 or higher (SecurityError exceptions are not raised on SAFE level 0). The code below (reduced from usage.rb) is enough to reproduce the bug: $SAFE = 1 require 'tidy' Tidy.path = '/usr/lib/libtidy.so' html = '<html><title>title</title>Body</html>' xml = Tidy.open {|tidy| tidy.clean(html) } puts xml -- Dmitry Borodaenko -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]