Clojail errs on the side of safety and not on the side of "Oh, well maybe 
he wasn't trying to break the sandbox. Let's allow it anyway.". Treating 
macros as opaque is just another hole in what is already difficult 
sandboxing. Macros are not even remotely close to functions. They *create* 
code. That code, just like any other explicitly written in your 
application, needs to be sandboxed. It is much easier and safer to sandbox 
dangerous functions. The fact that expanded macro code that uses those 
functions is also affected is less of a bug and more of a feature.

That said, of course it is unfortunate that things like this occur in 
4Clojure for things as simple as for. But clojail and 4clojure are separate 
projects. clojail is focused on being as safe as possible, which may 
sometimes clash with what would be most convenient in 4Clojure.

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en

Reply via email to