Re: [BUG] unsafe metatable paradigm

[Andrew Gierth <andrew@...>]

>>>>> "Viacheslav" == Viacheslav Usov <via.usov@gmail.com> writes:

 Viacheslav> So, why is the standard IO library not sandbox-friendly (in
 Viacheslav> the strict sense clarified above) out of the box?

I suspect most sandboxes don't expose the IO library at all (mine
certainly does not), since unmediated file access is usually one of the
things that sandboxing exists to prevent.

(The string library is another matter; some kinds of sandbox do need to
add a __metatable element to the string metatable to ensure that
sandboxed code can't reach any global values.)

-- 
Andrew.