ruby--ruby/spec/ruby/language/safe_spec.rb

require_relative '../spec_helper'

describe "The $SAFE variable" do

  ruby_version_is "2.6" do
    after :each do
      $SAFE = 0
    end
  end

  it "is 0 by default" do
    $SAFE.should == 0
    proc {
      $SAFE.should == 0
    }.call
  end

  it "can be set to 0" do
    proc {
      $SAFE = 0
      $SAFE.should == 0
    }.call
  end

  it "can be set to 1" do
    proc {
      $SAFE = 1
      $SAFE.should == 1
    }.call
  end

  [2, 3, 4].each do |n|
    it "cannot be set to #{n}" do
      lambda {
        proc {
          $SAFE = n
        }.call
      }.should raise_error(ArgumentError, /\$SAFE=2 to 4 are obsolete/)
    end
  end

  ruby_version_is ""..."2.6" do
    it "cannot be set to values below 0" do
      lambda {
        proc {
          $SAFE = -100
        }.call
      }.should raise_error(SecurityError, /tried to downgrade safe level from 0 to -100/)
    end
  end

  ruby_version_is "2.6" do
    it "raises ArgumentError when set to values below 0" do
      lambda {
        proc {
          $SAFE = -100
        }.call
      }.should raise_error(ArgumentError, "$SAFE should be >= 0")
    end
  end

  it "cannot be set to values above 4" do
    lambda {
      proc {
        $SAFE = 100
      }.call
    }.should raise_error(ArgumentError, /\$SAFE=2 to 4 are obsolete/)
  end

  ruby_version_is ""..."2.6" do
    it "cannot be manually lowered" do
      proc {
        $SAFE = 1
        lambda {
          $SAFE = 0
        }.should raise_error(SecurityError, /tried to downgrade safe level from 1 to 0/)
      }.call
    end

    it "is automatically lowered when leaving a proc" do
      $SAFE.should == 0
      proc {
        $SAFE = 1
      }.call
      $SAFE.should == 0
    end

    it "is automatically lowered when leaving a lambda" do
      $SAFE.should == 0
      lambda {
        $SAFE = 1
      }.call
      $SAFE.should == 0
    end
  end

  ruby_version_is "2.6" do
    it "can be manually lowered" do
      $SAFE = 1
      $SAFE = 0
      $SAFE.should == 0
    end

    it "is not Proc local" do
      $SAFE.should == 0
      proc {
        $SAFE = 1
      }.call
      $SAFE.should == 1
    end

    it "is not lambda local" do
      $SAFE.should == 0
      lambda {
        $SAFE = 1
      }.call
      $SAFE.should == 1
    end

    it "is global like regular global variables" do
      Thread.new { $SAFE }.value.should == 0
      $SAFE = 1
      Thread.new { $SAFE }.value.should == 1
    end
  end

  it "can be read when default from Thread#safe_level" do
    Thread.current.safe_level.should == 0
  end

  it "can be read when modified from Thread#safe_level" do
    proc {
      $SAFE = 1
      Thread.current.safe_level.should == 1
    }.call
  end
end