The original idea was that a trusted language does not allow an
unprivileged user to gain access to any object or data, he does not have
access to without that language.
This does not include data transformation functionality, like string
processing or the like. As long as the user had legitimate access to the
input datum, then every derived form thereof is OK.
Jan
--
Anyone who trades liberty for security deserves neither
liberty nor security. -- Benjamin Franklin