[web2py] Re: Secure view {{code}} - disabling import and dangerous commands

{{code}} - it's not pure Python, it's using Python as template language >From {{code}} it's possible to access all web2py environment (session, request and etc. ) I think, If you want to execute users' code at your server, you have to execute it as separate process under truncated system account

[web2py] Re: Secure view {{code}} - disabling import and dangerous commands

I think it's a better idea to just implement your own little DSL, it's very easy in python and much more secure. -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issue