Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!goblin1!goblin2!goblin.stu.neva.ru!newsfeed.xs4all.nl!newsfeed2a.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.016 X-Spam-Evidence: '*H*': 0.97; '*S*': 0.00; 'scripts': 0.03; 'say,': 0.05; 'correct.': 0.07; 'executed': 0.09; 'sure,': 0.09; 'cc:addr :python-list': 0.11; 'python': 0.11; 'language,': 0.12; 'letting': 0.16; 'wrote:on': 0.16; 'wrote:': 0.18; 'email addr:gmail.com>': 0.22; 'cc:addr:python.org': 0.22; 'mon,': 0.24; 'server.': 0.24; 'cc:2**0': 0.24; '>': 0.26; '15,': 0.26; 'compiled': 0.26; 'header:In-Reply-To:1': 0.27; 'chris': 0.29; 'am,': 0.29; 'dec': 0.30; 'message-id:@mail.gmail.com': 0.30; 'url:mailman': 0.30; 'code': 0.31; 'run': 0.32; 'url:python': 0.33; 'but': 0.35; 'received:google.com': 0.35; 'there': 0.35; '14,': 0.36; 'limitations': 0.36; 'url:listinfo': 0.36; 'url:org': 0.36; 'being': 0.38; 'server': 0.38; 'pm,': 0.38; 'users': 0.40; 'url:mail': 0.40; 'most': 0.60; 'helps': 0.61; 'issues,': 0.61; 'browser': 0.61; 'to:addr:gmail.com': 0.65; 'importantly,': 0.68; 'risk': 0.72; 'browser.': 0.78; 'execution.': 0.84; 'limitations,': 0.84 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=6ZitShTcqhvAQ5J1DP5EPr++eqN3KLnSP+83PwHFX7E=; b=AsaFGaRm8jaA6tGvuX0Ak5hYeNflAaMsSWIl1OTu8t6tfYmBuOWXAgdJH8JAeXohB0 jgX0mg7iIT910jgqxboZI+Qd4Szr2jXuMfmVCzBYKwWSfAwpPZUZ3DNJUrvEMk0GcZuy hOmCyC6/DyBnE9UccQOeL4d83QfKp1bh50unwucM2Lqa5sCs3Geu/boL39wF4h7qMJYz 9yM2Al0D5JWkc839eC5q8v9O8gOzIgZib4UkzxJTJahMb3sRDkdZarx0YbFFAjPB1zWt +tYfZiUPABJ4dG3yIAviMCjxWXNVpvI8/vOvB5FUlcg36CxZZ0/GT5c/AgBpT2pSTI+Q dapQ== MIME-Version: 1.0 X-Received: by 10.112.134.134 with SMTP id pk6mr27721288lbb.14.1418600475703; Sun, 14 Dec 2014 15:41:15 -0800 (PST) In-Reply-To: References: Date: Sun, 14 Dec 2014 17:41:15 -0600 Subject: Re: PySchool.net, kickstarter campaign From: Billy Earney To: Chris Angelico Content-Type: multipart/alternative; boundary=089e01175e7d6ebfdc050a35a98a Cc: "python-list@python.org" X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 64 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1418600482 news.xs4all.nl 2902 [2001:888:2000:d::a6]:44276 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:82534 --089e01175e7d6ebfdc050a35a98a Content-Type: text/plain; charset=UTF-8 ChrisA, Yes, you are correct. The scripts get compiled to javascript and then executed in the browser. Like you say, there are limitations, but most of these focus around browser security issues, and on the plus side, these scripts do not get executed on the server side, so that helps reduce risk there as well. billy On Sun, Dec 14, 2014 at 5:26 PM, Chris Angelico wrote: > > On Mon, Dec 15, 2014 at 2:07 AM, Billy Earney > wrote: > > Students can create, edit, load, save, and execute Python scripts > directly > > in the browser. > > Importantly, these scripts are actually executed in the client - they > are NOT being sent to the server for execution. That means there are > limitations on the language, to be sure, but none of the security > risks of letting untrusted users run Python code on the server. > > ChrisA > -- > https://mail.python.org/mailman/listinfo/python-list > --089e01175e7d6ebfdc050a35a98a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
ChrisA,

Yes, you are correct.=C2=A0 The= scripts get compiled to javascript and then executed in the browser. =C2= =A0 Like you say, there are limitations, but most of these focus around bro= wser security issues, =C2=A0and on the plus side, these scripts do not get = executed on the server side, so that helps reduce risk there as well.
=

billy

On Sun, Dec 14, 2014 at 5:26 PM, Chris Angelico <rosuav= @gmail.com> wrote:
On Mon, Dec 15, 2014 at 2:07 AM, Billy Earney <billy.earney@gmail.com> wrote:
> Students can create, edit, load, save, and execute Python scripts dire= ctly
> in the browser.

Importantly, these scripts are actually executed in the client - the= y
are NOT being sent to the server for execution. That means there are
limitations on the language, to be sure, but none of the security
risks of letting untrusted users run Python code on the server.

ChrisA
--
https://mail.python.org/mailman/listinfo/python-list
--089e01175e7d6ebfdc050a35a98a--