Enable RTS opts by default with security warning
RTS options have security problems. However, disabling them has a lot of downsides.
I propose enabling them by default, with a message like:
"Warning: RTS options are enabled. This has the security implications explained by http://.... To disable RTS options, use -disable-rtsopts. To suppress this warning, use -enable-rtsopts."
This would allow everyone to ignore the warning while in development, or explicitly enable rts opts as they do now. Security-minded projects will not be likely to forget to disable the RTS opts given this warning.
Trac metadata
| Trac field | Value |
|---|---|
| Version | 7.2.1 |
| Type | FeatureRequest |
| TypeOfFailure | OtherFailure |
| Priority | normal |
| Resolution | Unresolved |
| Component | Compiler |
| Test case | |
| Differential revisions | |
| BlockedBy | |
| Related | |
| Blocking | |
| CC | |
| Operating system | |
| Architecture |