I am not an expert on the JVM, but I think Google's runtime will disallow uploading precompiled bytecode (jar). The assumption is that if you can compile it on their servers, then it is legal and therefore safe. I hope they allow the use of ASM library.
Obviously this is speculation, but can you foresee any corner cases where Clojure's use of ASM might be considered 'unsafe' by Google? Thanks, Robin On Jan 29, 9:33 am, Rich Hickey <richhic...@gmail.com> wrote: > On Jan 27, 2:44 pm, Robin <robi...@gmail.com> wrote: > > > Under a huge assumption that Google will soon announce a 'Java > > compatible' runtime forAppEngine. Could Clojure work out of the > > box? Would Clojure's dynamic generation of ASM/bytecode pose a > > security problem for a generic sandboxed environment? If expected > > conflicts exist, what kind of adaptation would it take to port > > Clojure? > > I imagine ahead-of-time compiled Clojure code would pose the least > challenge, at it requires no custom classloader or dynamic bytecode. > Currently, AOT is enabling both untrusted applets and conversion for > Android/Dalvik. > > As far as dynamic bytecode, that has a lot to do with the sandbox. > > Rich --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en -~----------~----~----~----~------~----~------~--~---
