On Fri, Oct 3, 2008 at 10:43 PM, Arnaud Cornet <[EMAIL PROTECTED]> wrote:
> I can have libtidy-ruby work correcly at least on some cases. So this
> probably needs more information on how to reproduce.
>
> Typically, in the source package, running test/usage.rb instanciates a
> Tidy object and does not raise any security exception.

Yes, I forgot to mention that it happens on SAFE level 1 or higher
(SecurityError exceptions are not raised on SAFE level 0). The code
below (reduced from usage.rb) is enough to reproduce the bug:

$SAFE = 1
require 'tidy'
Tidy.path = '/usr/lib/libtidy.so'
html = '<html><title>title</title>Body</html>'
xml = Tidy.open {|tidy| tidy.clean(html) }
puts xml

-- 
Dmitry Borodaenko



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to