Check SwChar16VectorEvaluateInvocation

sw-char16vector-evaluate-invocation - Use of sw:char16_vector.evaluate()

Explanation

_local user_input << "gis_program_manager.cached_dataset(:gis).collection(:very_important_data).empty()"
user_input.evaluate()

The example shows the use of sw:char16_vector.evaluate() to execute user input as Magik code. This is dangerous as it can lead to code injection vulnerabilities if the user input is not properly sanitized.

Note

This page is generated. Any changes made to this page through the wiki will be lost in the future.