Re: Sanitizing first class values

[steve donovan <steve.j.donovan@...>]

On Thu, Nov 4, 2010 at 7:04 AM, George Georgalis <george@galis.org> wrote:
> understand how it can be used while sanitizing user input data at
> the same time? For example, never a good idea to shell-expand or
> interpret user input.  How are first class values any different
> than this practice?

Ah, but then sandboxing becomes important.  You can control the
environment in which any user values/expressions are evaluated, so
that no potentially harmful functions can be accessed.

http://lua-users.org/wiki/SandBoxes

steve d.