From: Ano Hito <lists@...>
Date: 2013-02-12T19:37:56+09:00
Subject: Re: Why doesn't Ruby have a built in sandbox class?

Tony Arcieri wrote in post #1096413:
> I posted a strawman for something similar a few days ago. It's a bit
> different idea from yours and a super-granular class whitelist:
>
> https://gist.github.com/tarcieri/4719525
>
> Clearly that doesn't cover all the "NO" cases, but I hope it gives you a
> general idea

Creating a secure context inside of a block would certainly be more 
rubylike than $SAFE = 4. But would you allow for managing what classes 
and methods are allowed to be used in a SecureContext? Otherwise it's 
not that different from just running the code in a new thread after 
setting $SAFE = 4 in the thread's context.

-- 
Posted via http://www.ruby-forum.com/.