Are SAFE levels supported in JRuby? If not, is there other ways of safely running user supplied code in server?
$SAFE and the JVM security are completely different concepts. $SAFE is all about stopping taint/sink based attacks by looking at where user supplied data is coming form. A JVM is a padded room, a room where you can still get pwn3d with SQL Injection.
Rook
2010-05-17 15:48:02