Is there anybody interested to review existing secure feature?

[Oldes]

Since the early R3-alpha version when you open the console, there is this notice about not fully available security:

The true is, that it is available, just not fully tested and reviewed. Is there someone ready to review the existing functionality and let me know, what could be changed/improved so I could remove the notice?

First of all, there should be mentioned secure as a special function like help. And it should provide some usage examples.

For example it is possible to limit maximum memory of a Rebol process using:

secure [memory 1'000'000]
make string! 2'000'000 ;;<- quits, because memory usage is exceeded

Quickly checking... it is possible to limit browse:

>> secure [browse throw]
>> browse http://rebol.com

** Access error: security violation: http://rebol.com  (refer to SECURE function)

But not access to net:

>> secure [net throw]
>> read http://rebol.com
 [HTTP] Opening connection: tcp://rebol.com:80

which is one of the missing features.. and I would like to find all :-/

[Oldes]

Just for a record, current secure help looks like:

>> help secure
USAGE:
     SECURE 'policy

DESCRIPTION:
     Set security policies (use SECURE help for more information).
     SECURE is a function! value.

ARGUMENTS:
     'policy       [word! lit-word! block! unset!] Set single or multiple policies (or HELP).

>> secure
 You can set policies for:
     file
     net
     eval
     memory
     secure
     protect
     debug
     envr
     call
     browse
     extension
 These can be set to:
     allow  - no security
     throw  - throw as an error
     quit   - exit the program immediately
     file   - a file path
     url    - a file path
     other  - other value, such as integer
 Settings for read, write, and execute are also available.

[greggirwin]

I'll keep this open as a reminder. It's a nice feature.

[rebolek]

I'm using secure for few things, I can take a deeper look.