Posted to tcl by kbk at Sat Jun 13 15:10:46 GMT 2009view raw
- % proc evil {} {puts {Evil code executed!}}
- % set file {[evil]}
- [evil]
- % set badcmd "open $file r"
- open [evil] r
- % set goodcmd [list open $file r]
- open {[evil]} r
- % eval $badcmd
- Evil code executed!
- couldn't open "": no such file or directory
- % eval $goodcmd
- couldn't open "[evil]": no such file or directory