[Date Prev][Date Next][Thread Prev][Thread Next]
[Date Index]
[Thread Index]
- Subject: Re: lua sandbox from c/c++
- From: Alex Queiroz <asandroq@...>
- Date: Thu, 19 Apr 2012 16:00:01 +0200
Hallo,
On Thu, Apr 19, 2012 at 3:57 PM, Coda Highland <chighland@gmail.com> wrote:
>
> I personally use "packages['io'] = true" so that subsequent calls to
> "require('io')" won't import the module. But that can be thwarted by a
> script that knows that this is done by calling "packages['io] = nil;
> require('io')" so this isn't all that secure; in my project, it's
> sufficient to remind my scripters that they're not supposed to be
> doing that.
>
What's wrong with just not opening the 'io' library?
--
-alex
http://www.artisancoder.com/