lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]

On Tue, 19 Jan 2010 17:34:25 +0100
ingmar wirths <> top-quoted:

> Thanks for your help so far, i guess i have to study luas sandboxing
> facilities. What still gives me frown, is that these sandboxing
> facilities are all implemented in lua. A user, who wants to bypass
> any restrictions, could just rewrite it, i guess. Or is the idea to
> have some basic lua code, the user is not permitted to modify, and
> load the user modified ai in some sandbox?

The idea is that if a Lua function can't see another Lua function, it
can't call it, and it can't magic up a reference to it (unless you
expose the debug interface, of course. :)