Script Security

wiki

A software system that uses scripts (which are often available in readable form to the end user) significantly compounds security issues.

If not carefully designed, a software system that uses external scripts is extremely vulnerable, not only to malicious attacks, but also to simple coding mistakes and typeos made by well-intentioned users.

The links on this page lead to various articles on script security and how to make lua scripts more robust and resistant to attacks and coding mistakes.

Links with ? after them are in need of content. Please feel free to add it.

• ReadOnlyTables - How to make a table read-only
• SandBoxes - How to execute a script in a secure sandbox
• MemoryLimits - How to limit a script from using too much memory
• CpuLimits? - How to limit a script from using too much CPU time

More material is available [1] (Link down? 2006-09-07).