ruby--ruby/spec/ruby/language/safe_spec.rb

require_relative '../spec_helper'

describe "The $SAFE variable" do
  ruby_version_is ""..."2.7" do
    ruby_version_is "2.6" do
      after :each do
        $SAFE = 0
      end
    end

    it "is 0 by default" do
      $SAFE.should == 0
      proc {
        $SAFE.should == 0
      }.call
    end

    it "can be set to 0" do
      proc {
        $SAFE = 0
        $SAFE.should == 0
      }.call
    end

    it "can be set to 1" do
      proc {
        $SAFE = 1
        $SAFE.should == 1
      }.call
    end

    [2, 3, 4].each do |n|
      it "cannot be set to #{n}" do
        -> {
          proc {
            $SAFE = n
          }.call
        }.should raise_error(ArgumentError, /\$SAFE=2 to 4 are obsolete/)
      end
    end

    ruby_version_is ""..."2.6" do
      it "cannot be set to values below 0" do
        -> {
          proc {
            $SAFE = -100
          }.call
        }.should raise_error(SecurityError, /tried to downgrade safe level from 0 to -100/)
      end
    end

    ruby_version_is "2.6" do
      it "raises ArgumentError when set to values below 0" do
        -> {
          proc {
            $SAFE = -100
          }.call
        }.should raise_error(ArgumentError, "$SAFE should be >= 0")
      end
    end

    it "cannot be set to values above 4" do
      -> {
        proc {
          $SAFE = 100
        }.call
      }.should raise_error(ArgumentError, /\$SAFE=2 to 4 are obsolete/)
    end

    ruby_version_is ""..."2.6" do
      it "cannot be manually lowered" do
        proc {
          $SAFE = 1
          -> {
            $SAFE = 0
          }.should raise_error(SecurityError, /tried to downgrade safe level from 1 to 0/)
        }.call
      end

      it "is automatically lowered when leaving a proc" do
        $SAFE.should == 0
        proc {
          $SAFE = 1
        }.call
        $SAFE.should == 0
      end

      it "is automatically lowered when leaving a lambda" do
        $SAFE.should == 0
        -> {
          $SAFE = 1
        }.call
        $SAFE.should == 0
      end
    end

    ruby_version_is "2.6" do
      it "can be manually lowered" do
        $SAFE = 1
        $SAFE = 0
        $SAFE.should == 0
      end

      it "is not Proc local" do
        $SAFE.should == 0
        proc {
          $SAFE = 1
        }.call
        $SAFE.should == 1
      end

      it "is not lambda local" do
        $SAFE.should == 0
        -> {
          $SAFE = 1
        }.call
        $SAFE.should == 1
      end

      it "is global like regular global variables" do
        Thread.new { $SAFE }.value.should == 0
        $SAFE = 1
        Thread.new { $SAFE }.value.should == 1
      end
    end

    it "can be read when default from Thread#safe_level" do
      Thread.current.safe_level.should == 0
    end

    it "can be read when modified from Thread#safe_level" do
      proc {
        $SAFE = 1
        Thread.current.safe_level.should == 1
      }.call
    end
  end

  ruby_version_is "2.7"..."3.0" do
    it "warn when access" do
      -> {
        $SAFE
      }.should complain(/\$SAFE will become a normal global variable in Ruby 3.0/)
    end

    it "warn when set" do
      -> {
        $SAFE = 1
      }.should complain(/\$SAFE will become a normal global variable in Ruby 3.0/)
    end
  end
end