From: Josh Cheek <josh.cheek@...>
Date: 2010-02-23T21:19:47+09:00
Subject: Re: Dia 1.1 released!

--000e0cd1b728719345048043738b
Content-Type: text/plain; charset=ISO-8859-1

On Tue, Feb 23, 2010 at 5:19 AM, Robert Gleeson <rob@flowof.info> wrote:

> I'm just leaving an update:
>
> Dia 1.3 was released a few days ago, and introduces some convenience
> methods like Dia::Sandbox#terminate and Dia::Sandbox#alive? . Also
> included in this release are API changes that add some
> consistency(whether you are running a block or an application in a
> sandbox, both are supplied to the constructer and initiated with
> Dia::Sandbox#run)
>
> Documentation: http://www.flowof.info/dia
>
> Rob ,
> http://blog.flowof.info
> --
> Posted via http://www.ruby-forum.com/.
>
>
Hi, Robert, I've been wanting to do a Rails project for my ACM group at
school that includes functionality similar to codepad.org and javabat.com,
where code is submitted by the user and executed on the server. Of course,
there are huge security risks with this, that I don't currently have the
knowledge to address. Would Dia be able to handle situations like this (at
least for Ruby)?

In particular, I want to take user submitted code and
1) execute it, evaluate the output
2) run some predesigned set of unit tests / specs against it, and report the
success/failures

I feel like this could be a very effective learning tool, but like I said,
security has been a big hurdle.

-Josh

--000e0cd1b728719345048043738b--