--- loncom/xml/lonxml.pm 2005/04/04 18:14:58 1.370 +++ loncom/xml/lonxml.pm 2005/04/07 00:42:07 1.371 @@ -1,7 +1,7 @@ # The LearningOnline Network with CAPA # XML Parser Module # -# $Id: lonxml.pm,v 1.370 2005/04/04 18:14:58 albertel Exp $ +# $Id: lonxml.pm,v 1.371 2005/04/07 00:42:07 albertel Exp $ # # Copyright Michigan State University Board of Trustees # @@ -695,6 +695,8 @@ sub init_safespace { $safeeval->permit(":base_math"); $safeeval->permit("sort"); $safeeval->permit("time"); + $safeeval->deny("rand"); + $safeeval->deny("srand"); $safeeval->deny(":base_io"); $safehole->wrap(\&Apache::scripttag::xmlparse,$safeeval,'&xmlparse'); $safehole->wrap(\&Apache::outputtags::multipart,$safeeval,'&multipart');