logoalt Hacker News

rurban • today at 6:12 AM • 0 replies • view on HN

Oh oh, unsafe eval in a sandbox! (loadstring).

In my lua-like sandbox I disabled all escape hatches and unsafe functions physically by #ifndef SANDBOX. No IO, no FFI, no byte code loading, no memory funcs and such.