[LON-CAPA-cvs] cvs: loncom /xml lonxml.pm
albertel
lon-capa-cvs@mail.lon-capa.org
Thu, 07 Apr 2005 00:42:07 -0000
albertel Wed Apr 6 20:42:07 2005 EDT
Modified files:
/loncom/xml lonxml.pm
Log:
- BUG#4045 diable the srand and rand Opcode, attempts to use either will throw errors
and not work
Index: loncom/xml/lonxml.pm
diff -u loncom/xml/lonxml.pm:1.370 loncom/xml/lonxml.pm:1.371
--- loncom/xml/lonxml.pm:1.370 Mon Apr 4 14:14:58 2005
+++ loncom/xml/lonxml.pm Wed Apr 6 20:42:07 2005
@@ -1,7 +1,7 @@
# The LearningOnline Network with CAPA
# XML Parser Module
#
-# $Id: lonxml.pm,v 1.370 2005/04/04 18:14:58 albertel Exp $
+# $Id: lonxml.pm,v 1.371 2005/04/07 00:42:07 albertel Exp $
#
# Copyright Michigan State University Board of Trustees
#
@@ -695,6 +695,8 @@
$safeeval->permit(":base_math");
$safeeval->permit("sort");
$safeeval->permit("time");
+ $safeeval->deny("rand");
+ $safeeval->deny("srand");
$safeeval->deny(":base_io");
$safehole->wrap(\&Apache::scripttag::xmlparse,$safeeval,'&xmlparse');
$safehole->wrap(\&Apache::outputtags::multipart,$safeeval,'&multipart');