search

idvoretskyi / horizon-cloud

An operations service to deploy, manage, and scale Horizon apps
0 stars 0 forks source link

double-check the way Horizon is sandboxing permissions #110

Closed mlucy closed 8 years ago

encryptio commented 8 years ago

Seems good. The arbitrary function part runs in an empty sandbox, and the templator runs in a sandbox with a modified client AST builder. Neither can do anything to the outside world (including require things.)