Re: Sandboxing Python

2015-08-24 Thread Ned Batchelder
On Saturday, August 22, 2015 at 11:58:30 PM UTC-4, Laura Creighton wrote: > Ned Batchelder has researched this one quite a bit, see: > > see: http://nedbatchelder.com/blog/201206/eval_really_is_dangerous.html > http://nedbatchelder.com/blog/201302/looking_for_python_3_builtins.html > http://nedbat

Re: Sandboxing Python

2015-08-23 Thread Akira Li
Mark Lawrence writes: > I was always led to believe that the subject was a difficult thing to > do, but here > https://www.reddit.com/r/learnpython/comments/3huz4x/how_to_do_math_inside_raw_input/ > is a safe solution in only 23 characters, or are there any discernable > flaws in it? Related: h

Re: Sandboxing Python

2015-08-22 Thread Chris Angelico
On Sun, Aug 23, 2015 at 3:17 PM, Christian Gollwitzer wrote: > Would it be that difficult to get the same for Python? On the C side, the > interpreter is a structure and does not use global variables (as opposed to > CPython), therefore it is easy to create more than one interpreter in a > single

Re: Sandboxing Python

2015-08-22 Thread Christian Gollwitzer
Am 23.08.15 um 02:04 schrieb Chris Angelico: import os eval("os.system('rm -rf /')", {"__builtins__":None}) Traceback (most recent call last): File "", line 1, in eval("os.system('rm -rf /')", {"__builtins__":None}) File "", line 1, in TypeError: 'NoneType' object is not subscript

Re: Sandboxing Python

2015-08-22 Thread Laura Creighton
Ned Batchelder has researched this one quite a bit, see: see: http://nedbatchelder.com/blog/201206/eval_really_is_dangerous.html http://nedbatchelder.com/blog/201302/looking_for_python_3_builtins.html http://nedbatchelder.com/blog/201302/finding_python_3_builtins.html Laura -- https://mail.pytho

Re: Sandboxing Python

2015-08-22 Thread Chris Angelico
On Sun, Aug 23, 2015 at 9:52 AM, Mark Lawrence wrote: > On 23/08/2015 00:44, Chris Angelico wrote: >> >> On Sun, Aug 23, 2015 at 9:25 AM, Mark Lawrence >> wrote: >>> >>> I was always led to believe that the subject was a difficult thing to do, >>> but here >>> >>> https://www.reddit.com/r/learnpy

Re: Sandboxing Python

2015-08-22 Thread Mark Lawrence
On 23/08/2015 00:44, Chris Angelico wrote: On Sun, Aug 23, 2015 at 9:25 AM, Mark Lawrence wrote: I was always led to believe that the subject was a difficult thing to do, but here https://www.reddit.com/r/learnpython/comments/3huz4x/how_to_do_math_inside_raw_input/ is a safe solution in only 23

Re: Sandboxing Python

2015-08-22 Thread Chris Angelico
On Sun, Aug 23, 2015 at 9:25 AM, Mark Lawrence wrote: > I was always led to believe that the subject was a difficult thing to do, > but here > https://www.reddit.com/r/learnpython/comments/3huz4x/how_to_do_math_inside_raw_input/ > is a safe solution in only 23 characters, or are there any discerna

Re: Sandboxing Python [was Re: New user's initial thoughts / criticisms of Python]

2013-11-09 Thread Chris Angelico
On Sun, Nov 10, 2013 at 2:25 AM, Steven D'Aprano wrote: > On Sun, 10 Nov 2013 01:27:11 +1100, Chris Angelico wrote: > >> I was trying to sandbox CPython and run untrusted scripts while stopping >> them from accessing the OS or file system. It's basically impossible > > PyPy is supposed to come wit