Path: csiph.com!news.mixmin.net!feeder1.xsusenet.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!newsgate.news.xs4all.nl!nzpost1.xs4all.net!not-for-mail
To: python-list@python.org
From: Mark Lawrence <breamoreboy@yahoo.co.uk>
Subject: Re: Sandboxing Python
Date: Sun, 23 Aug 2015 00:52:45 +0100
References: <mrb0eh$2md$1@ger.gmane.org> <CAPTjJmrD3oBaHW64BNV6g9RM8LP7khdYUaXDjMXLeSb7dDe7Dg@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
In-Reply-To: <CAPTjJmrD3oBaHW64BNV6g9RM8LP7khdYUaXDjMXLeSb7dDe7Dg@mail.gmail.com>
Precedence: list
Newsgroups: comp.lang.python
Message-ID: <mailman.21.1440287583.17298.python-list@python.org>
Lines: 51
NNTP-Posting-Host: 2001:888:2000:d::a6
Xref: csiph.com comp.lang.python:95571

On 23/08/2015 00:44, Chris Angelico wrote:
> On Sun, Aug 23, 2015 at 9:25 AM, Mark Lawrence <breamoreboy@yahoo.co.uk> wrote:
>> I was always led to believe that the subject was a difficult thing to do,
>> but here
>> https://www.reddit.com/r/learnpython/comments/3huz4x/how_to_do_math_inside_raw_input/
>> is a safe solution in only 23 characters, or are there any discernable flaws
>> in it?
>
>
> I'm sorry, I can't see which solution you're talking about there -
> maybe I just don't know how to read reddit properly. Can you paste the
> proposed code please?
>
> The best I can see there is "use eval but with no builtins". That's
> fundamentally flawed because you don't need builtins to break stuff.
> All you need is a literal, from which you can snag everything else via
> its attributes.
>
> However, for this situation, I would be recommending ast.literal_eval,
> which *is* safe. It's a lot more powerful than "split it into number,
> operator, number" as mentioned at the end, but still can't majorly
> break anything.
>
> ChrisA
>

<code>
 >>> import os
 >>> eval("os.system('rm -rf /')", {"__builtins__":None})
Traceback (most recent call last):
   File "<pyshell#8>", line 1, in <module>
     eval("os.system('rm -rf /')", {"__builtins__":None})
   File "<string>", line 1, in <module>
TypeError: 'NoneType' object is not subscriptable
</code>

<comment>
Surely I must I have missed your meaning because I needed just 23 
characters and zero extra lines to create a safe sandbox for this, but 
you've said that the core developers have tried and failed to do this. 
It appears that I didn't just wipe out my entire filesystem and you've 
stated quite matter-of-factly that there is no safe solution... so what 
happened here? Why didn't my filesystem just get wiped out?
</comment>

-- 
My fellow Pythonistas, ask not what our language can do for you, ask
what you can do for our language.

Mark Lawrence