Re: Is there any security risk related to the use of the reader?

[Matt Wette]

On 02/25/2018 07:35 AM, Amirouche Boubekki wrote:
> I have procedures like that in my program:
>
> (define-public (scm->string scm)
>   (call-with-output-string
>     (lambda (port)
>       (write scm port))))
>
> (define-public (string->scm string)
>   (call-with-input-string string read))
>
> Is it safe to pass to this procedures input from third parties?
>
> TIA!

maybe check (ice-9 sandbox), explained in section 6.18.12 of the 2.2.3 
manual