B.: The Safe-Tcl security model (1997)

by J Levy, J Ousterhout, Welch