History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: BOO-333
Type: Bug Bug
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Unassigned
Reporter: Arron Washington
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
Boo

Events can be directly raised outside of defining assembly.

Created: 21/May/05 02:46 PM   Updated: 02/Nov/06 06:12 AM
Component/s: Compiler
Affects Version/s: None
Fix Version/s: 0.7

Time Tracking:
Not Specified


 Description  « Hide
Currently, Boo allows for events to be raised outside of the assembly they have been declared in.

This raises security issues for those wishing to use an event-based environment with CAS. The follow code sample should not work and demonstrates the problem by invoking TriggerMe outside of its declaring assembly:

"""External assembly."""
namespace BooEventlib

import System

class MyClass:
def constructor():
pass
event TriggerMe as callable()

"""Consuming assembly."""
namespace BooTesta

import System
import System.Drawing
import System.Windows.Forms
import BooEventlib

m = MyClass()
m.TriggerMe += { print "LOL!" }
m.TriggerMe() //Should not be possible.



 All   Comments   Work Log   Change History      Sort Order: Ascending order - Click to sort in descending order
There are no comments yet on this issue.