README.markdown in safemode-1.2.5 vs README.markdown in safemode-1.3.1
- old
+ new
@@ -43,9 +43,13 @@
end
This will allow your template users to access the name method on your User
objects.
+Class methods can be whitelisted by calling `allow_class_method :foo` from
+within the Jail. Note that access to raw constants is not permitted, so the
+class is only accessible when returned by a method or passed into a template.
+
For more details about the concepts behind Safemode please refer to the
following blog posts until a more comprehensive writeup is available:
* Initial reasoning: [http://www.artweb-design.de/2008/2/5/sexy-theme-templating-with-haml-safemode-finally](http://www.artweb-design.de/2008/2/5/sexy-theme-templating-with-haml-safemode-finally)
* Refined concept: [http://www.artweb-design.de/2008/2/17/sending-ruby-to-the-jail-an-attemp-on-a-haml-safemode](http://www.artweb-design.de/2008/2/17/sending-ruby-to-the-jail-an-attemp-on-a-haml-safemode)