My #move method was perfectly innocuous; I cheated by making my player never take damage, and by giving him infinite stats. Parsing source code for "bad" stuff

My #move method was perfectly innocuous; I cheated by making my player never take damage, and by giving him infinite stats. Parsing source code for "bad" stuff is generally an arms race you can't win. For actual sandboxing you need a clean environment (hence, the reference to Lua's setfenv).