leave a note on a potential future Lua sandbox issue

diff --git a/src/nhlua.c b/src/nhlua.c
index 20fd28919862beb4029fabd4fbb85f46712237ea..0c192ac38587e62a734714db492f927ce16e792d 100644 (file)
--- a/src/nhlua.c
+++ b/src/nhlua.c
@@ -2018,6 +2018,8 @@ static struct e ct_base_iffy[] = {
 };
 
 /* NHL_BASE_UNSAFE - include only if required */
+/* TODO: if NHL_BASE_UNSAFE is ever used, we need to wrap lua_load with
+ * something to forbid mode=="b" */
 static struct e ct_base_unsafe[] = {
     {IFFLAG, "dofile"},
     {IFFLAG, "loadfile"},