Re: load and upvalues

[Sean Conner <sean@...>]

It was thus said that the Great Egor Skriptunoff once stated:
> On Wed, May 8, 2019 at 1:07 AM Egor Skriptunoff wrote:
> 
> > This way, untrusted code could successfully dump and load your_function()
> > without being able to extract any info about it.
> >
> 
> 
> I foresee the question: "Isn't it dangerous to allow untrusted code to load
> arbitrary bytecode?"

  That's why from Lua 5.2 onwards, load() has a parameter to restrict
loading of bytecode.  And a sandbox would not include load() (or a
restricted version of it).

  -spc