duckinator/sicuro — pull request #2 by daviddavis (2012-04-01 19:17:01+00:00)
Title: Prevent users from getting environment variables

Rubeque got hacked by someone basically calling "puts ENV" inside Sicuro.eval. This pull request should prevent that from happening by unsetting ENV inside the Sicuro eval process. I am not sure if I put it in the right place so let me know if I need to change that. Also, I should probably also check for any other constants that Ruby automatically sets as well. Thanks!