Raynes / clojail

A control freak's best friend
Eclipse Public License 1.0
211 stars 27 forks source link

white-list? #7

Open cyruszhang opened 10 years ago

cyruszhang commented 10 years ago

Hey dear clojail contributors,

I am using clojail in my project and realized that clojail, being a blacklist based sandbox, will allow accessing global vars and functions. if some functions are doing some database side effects and such, clojail won't stop the side effect from happening.

Is my understanding correct? if yes, a whiltelist based sandbox will possibly make the issue go away; is supporting whitelist based sandboxing in your plan?

Regards, Cyrus