summaryrefslogtreecommitdiff
path: root/spec/ruby/language/safe_spec.rb
blob: 305965c1a7b142388e14d48c9687b7c1aca556d7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
require_relative '../spec_helper'

describe "The $SAFE variable" do

  ruby_version_is "2.6" do
    after :each do
      $SAFE = 0
    end
  end

  it "is 0 by default" do
    $SAFE.should == 0
    proc {
      $SAFE.should == 0
    }.call
  end

  it "can be set to 0" do
    proc {
      $SAFE = 0
      $SAFE.should == 0
    }.call
  end

  it "can be set to 1" do
    proc {
      $SAFE = 1
      $SAFE.should == 1
    }.call
  end

  [2, 3, 4].each do |n|
    it "cannot be set to #{n}" do
      lambda {
        proc {
          $SAFE = n
        }.call
      }.should raise_error(ArgumentError, /\$SAFE=2 to 4 are obsolete/)
    end
  end

  ruby_version_is ""..."2.6" do
    it "cannot be set to values below 0" do
        lambda {
          proc {
            $SAFE = -100
          }.call
        }.should raise_error(SecurityError, /tried to downgrade safe level from 0 to -100/)
    end
  end

  it "cannot be set to values above 4" do
      lambda {
        proc {
          $SAFE = 100
        }.call
      }.should raise_error(ArgumentError, /\$SAFE=2 to 4 are obsolete/)
  end

  ruby_version_is ""..."2.6" do
    it "cannot be manually lowered" do
      proc {
        $SAFE = 1
        lambda {
          $SAFE = 0
        }.should raise_error(SecurityError, /tried to downgrade safe level from 1 to 0/)
      }.call
    end

    it "is automatically lowered when leaving a proc" do
      $SAFE.should == 0
      proc {
        $SAFE = 1
      }.call
      $SAFE.should == 0
    end

    it "is automatically lowered when leaving a lambda" do
      $SAFE.should == 0
      lambda {
        $SAFE = 1
      }.call
      $SAFE.should == 0
    end
  end

  it "can be read when default from Thread#safe_level" do
    Thread.current.safe_level.should == 0
  end

  it "can be read when modified from Thread#safe_level" do
    proc {
      $SAFE = 1
      Thread.current.safe_level.should == 1
    }.call
  end
end