[Ecls-list] Kamen Lisp - ECL embedded in Firefox

Juan Jose Garcia-Ripoll jjgarcia at users.sourceforge.net
Fri Apr 6 08:05:48 UTC 2007


2007/4/6, Pierre THIERRY <nowhere.man at levallois.eu.org>:
> I agree that there are huge security issues, as CL is not quite meant to
> be used with hostile code. Maybe a VM implementation would be easier to
> make secure.

But ECL is its own VM and one may easily prevent that binaries be
loaded. That leaves you with the Common-Lisp library and whatever
Mozilla exposes to running scripts, with the same security issues as
javascript. The only true security issues are in my opinion related to
whether the code in ECL is safe enough or not.

Juanjo

-- 
Facultad de Fisicas, Universidad Complutense,
Ciudad Universitaria s/n Madrid 28040 (Spain)
http://juanjose.garciaripoll.googlepages.com




More information about the ecl-devel mailing list