I've now also documented the issue and the solution I'm using on Tcl's Wiki, for reference: http://wiki.tcl.tk/26791 Feel free to disagree but I wanted that security in my code :-) -- Kristoffer Lawson, Co-Founder, Scred // http://www.scred.com/