summaryrefslogtreecommitdiff
path: root/tex/context/base/mkiv/cont-run.lua
diff options
context:
space:
mode:
Diffstat (limited to 'tex/context/base/mkiv/cont-run.lua')
-rw-r--r--tex/context/base/mkiv/cont-run.lua5
1 files changed, 2 insertions, 3 deletions
diff --git a/tex/context/base/mkiv/cont-run.lua b/tex/context/base/mkiv/cont-run.lua
index 0420ed01c..d9dad3f2d 100644
--- a/tex/context/base/mkiv/cont-run.lua
+++ b/tex/context/base/mkiv/cont-run.lua
@@ -90,7 +90,7 @@ local function logsandbox(details)
end
end
-local ioopen = sandbox.original(io.open)
+local ioopen = sandbox.original(io.open) -- dummy call
local function logsandboxfiles(name,what,asked,okay)
-- we're only interested in permitted access
@@ -161,14 +161,13 @@ if sandboxing then
-- Nicer would be if we could just disable write 18 and keep os.execute
-- which in fact we can do by defining write18 as macro instead of
- -- primitive ... todo.
+ -- primitive ... todo ... well, it has been done now.
-- We block some potential escapes from protection.
context [[
\let\primitive \relax
\let\normalprimitive\relax
- \let\normalwrite \relax
]]
end