Possible vulnerability using TH to run arbitrary IO

[snoyberg]

http://core.alpmestan.com/46

{-# LANGUAGE TemplateHaskell #-}
import Language.Haskell.TH.Syntax

main = $(qRunIO (readFile "/etc/passwd") >>= error)

[alpmestan]

I know, I'm actually working on a solution for that (remember the Google+ discussion). The website hasn't been published so I'm doing this as time permits. Probably going to use something à-la isolate.c (cf g+ post).

[alpmestan]

(for reference:) I just saw the website actually had been published, "behind my back". It's not not referenced from reddit anymore. I'm going to write the isolation part in the upcoming days and probably make it public after that.