[Python-Dev] Challenge: Please break this! (a.k.a restricted mode revisited) (original) (raw)

Victor Stinner victor.stinner at gmail.com
Tue Apr 12 08:20:37 EDT 2016


2016-04-12 13:38 GMT+02:00 Maciej Fijalkowski <fijall at gmail.com>:

(...) you end up with either a completely unusable python (the python that can't run anything is trivially secure)

Yeah, that's the obvious question: what's the purpose of such very limited Python subset, for example something limited to int with a few operators (+ - * /)?

That's also why I gave up with pysandbox. It became impossible to execute anything more complex than an hello world.

By the way, I noticed that enum.Enum and enum.EnumMeta don't work in your sandbox.

Victor



More information about the Python-Dev mailing list