We want to include existing synthesizers as generators in our synthesizers (include patches from patches). We could use Lua's built-in module system, but i think we should apply some kind of sand boxing to prevent security exploits and fatal programming errors. PatchScript/MidiScript doesn't have to follow the highest standards of IT-security but it should be entirely impossible to harm the system. Therefor whatever solution we choose, inclusion of arbitrary code/libraries should be limited in some way e.g. to synthesizer patches from the library.
It might be possible to solve this issue entirely be implementing #89 because Lua's sand boxing is very fine grained.
kallaballa
commented
4 years ago
We want to include existing synthesizers as generators in our synthesizers (include patches from patches). We could use Lua's built-in module system, but i think we should apply some kind of sand boxing to prevent security exploits and fatal programming errors. PatchScript/MidiScript doesn't have to follow the highest standards of IT-security but it should be entirely impossible to harm the system. Therefor whatever solution we choose, inclusion of arbitrary code/libraries should be limited in some way e.g. to synthesizer patches from the library.
It might be possible to solve this issue entirely be implementing #89 because Lua's sand boxing is very fine grained.