search

zapnap / rdocinfo

New development has moved to http://github.com/lsegal/rubydoc.info
http://rdoc.info
MIT License
18 stars 3 forks source link

yardoc not generating - problem with yardopts #31

Closed markevans closed 14 years ago

markevans commented 14 years ago

Hi there!

Is there any way of finding out what is wrong with my project at http://rdoc.info/projects/markevans/dragonfly ?

It generates fine locally on my machine

Many thanks

Mark

zapnap commented 14 years ago

Hi Mark,

The issue is that our custom version of YARD doesn't support the -e switch for security reasons. I probably should have modified it to just not execute that code instead of removing the option entirely.

markevans commented 14 years ago

I see - thanks for getting back. Does that mean there's no way of using custom YARD handlers? Thanks

zapnap commented 14 years ago

With rdoc.info it does, yes (at least for now, open to suggestions / patches). That would allow arbitrary code execution, which would open us up to a possible compromise without a proper sandbox.

markevans commented 14 years ago

Right - makes sense. Cheers Mark