Where in the OP's post do you see that it's an open config file accessible by others?
Trouble is, it's not just "others" that you have to worry about. In your config file it is your own typos, etc. Config files should be parsed, not executed. And if for some odd reason they must be executed, do it at compile time. And if for some other reason you have to do it at run-time then you'd better be using taint mode.
🦛
In reply to Re^3: trouble with packages/eval/variable-scoping
by hippo
in thread trouble with packages/eval/variable-scoping
by Ratazong
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |