Re: [Bug-apl] Safe mode is not so safe

[enztec]

Are you doing this on your own irc server or in a 'freenode' type public 
channel?

Why not start by setting this up in a chroot 'jail' and in a vm   :)




On Wed, 29 Mar 2017 12:21:29 +0800
Elias Mårtenson <address@hidden> wrote:

> I'm implementing an IRC bot that can run arbitrary APL expressions. Since
> this bot can run code submitted by anyone, I need to ensure that the code
> can't affect the system where the APL expressions are executed.
> 
> This is the purpose of the --safe flag, but I have noted that several
> destructive operations are still permitted when using this flag.
> 
> In particular:
> 
> 
>    - SQL operations
>    - FILE_IO
>    - )OUT
>    - )DUMP, )DUMPV, )DUMP-HTML
>    - )COPY, )LOAD, etc…
>    - )HOST
> 
> There is probably more, but preventing these would be a good start.
> 
> Regards,
> Elias