You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It is quite easy to break out of the sandbox, because the context doesn't restrict things like constants etc. .
With e.g. https://github.com/tario/shikashi you can restrict them, but it isn't ruby-1.9-compatible yet.
Can you make suggestions how you would solve this problem in combination with "sandboxed"?
Thanks,
der Flo
The text was updated successfully, but these errors were encountered:
Currently, Sandboxed is merely a wrapper for Ruby's $SAFE mechanism. The current HEAD is prepared to use other mechanisms, and I even started to implement source inspection. Alas, my current project doesn't allow to finish it right now.
If you have urgent requests that can be fixed in little time, I'll be glad to help, though. Just bring on the details / test cases ;o)
Well ok, I fixed this issue by moving all the sandboxed code out to another ruby process. I'll watch this project and this issue for progress.
Thanks for your answer.
It is quite easy to break out of the sandbox, because the context doesn't restrict things like constants etc. .
With e.g. https://github.com/tario/shikashi you can restrict them, but it isn't ruby-1.9-compatible yet.
Can you make suggestions how you would solve this problem in combination with "sandboxed"?
Thanks,
der Flo
The text was updated successfully, but these errors were encountered: