diff --git a/core/ruby/security.rb b/core/ruby/security.rb index 7792048a9..111b927f3 100644 --- a/core/ruby/security.rb +++ b/core/ruby/security.rb @@ -15,7 +15,26 @@ # # @note Prevent eval from ever being used -def eval(args) - puts "For security reasons the eval method is not accepted in the Browser Exploitation Framework code base." +# def eval(args) +# puts "For security reasons the eval method is not accepted in the Browser Exploitation Framework code base." +# exit +# end + +# @note Prevent exec from ever being used +def exec(args) + puts "For security reasons the exec method is not accepted in the Browser Exploitation Framework code base." exit end + +# @note Prevent system from ever being used +def system(args) + puts "For security reasons the system method is not accepted in the Browser Exploitation Framework code base." + exit +end + +# @note Prevent Kernel.system from ever being used +def Kernel.system(args) + puts "For security reasons the Kernel.system method is not accepted in the Browser Exploitation Framework code base." + exit +end +