lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


On Tue, Oct 23, 2012 at 3:39 PM, Konstantinos Asimakis
<inshame@gmail.com> wrote:
> PS: security wise you have to follow Elias' advice. If you run untrusted
> code be careful what libraries you expose to it. If you are using Lua 5.2
> you can use load() to sandbox function by providing a safe environment for
> them to run in.

Oh yes, in particular don't allow users to access the debug.*
functions.  (With Lua 5.1 one uses setfenv for the same purpose)

http://lua-users.org/wiki/SandBoxes

steve d.