Allow per-class whitelisting of methods safe to expose through DRb #50
mohamedhafez
added
some commits
Sep 27, 2011
Hi. I forwarded this issue to our ITS: http://redmine.ruby-lang.org/issues/5434 Please follow the discussion there. I can do the pull once you get consensus. |
Closing this as there is already an open ticket in redmine |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Allows the optional declaration of a whitelist of methods to expose through DRb for any class DRb will be sharing an instance of. (The current behavior of exposing all public methods of a class can leave a pretty scary security hole in some applications)
If drb_safe_methods is used in a class's definition, then any attempt to call a non-whitelisted method on that class through DRb will fail. There is no change to DRb's normal behavior if drb_safe_methods has not been called in a class's definition.