From: Harmeet B. <ha...@ko...> - 2002-11-18 05:16:02
|
> > Will it be possible to write recursive macros ? > If the macros can be evaluated in such a way that they terminate at > compile time, yes. Would it be possible to have some example of safe but recursive macro ? I feel that macro directive call graph and recursive calls could be abused by a malicious person. Is this likely ? Is it possible to provide a way to limit macros to make them safer ? Can wm templates be used as part of a hosting solution ? Can one provide ability to add wm templates but somehow restrict the person uploading wm templates from bringing down the container. With 1.0, I was thinking that restricting available Java packages and disallowing the include directive could do the trick. Is this true ? Does it make sense ? Is this in line with web macro use case ? Appreciate your help. I have been using webmacro a little bit for a year but don't know enough about it. One thing would help (at least)me a lot would be some documentation on web application security with web macro. thanks, Harmeet |