4 ms·
Tcl's possibility to use a restricted child interpreter and the active file pattern come to mind.
by bsdooby 5y ago
Tcl's possibility to use a restricted child interpreter and the active file pattern come to mind.
- tyingq 5y agoPerl does ship a sandbox module called Safe as a standard module, though I don't know how strong it is.
- blacksqr 5y ago"The Safe module does not implement an effective sandbox for evaluating untrusted code with the perl interpreter." https://perldoc.perl.org/Safe https://perldoc.perl.org/Safe
- tyingq 5y agoYeah, though in this case, whitelisting opcodes probably would have at least avoided qx and ``(both exec()). Avoiding the eval() altogether would be the right path, of course.