security: need to sandbox Janino code compilation

uwescience / myria

Myria is a scalable Analytics-as-a-Service platform based on relational algebra.

myria.cs.washington.edu

Other

112 stars 46 forks source link

Open dhalperi opened 10 years ago

dhalperi commented 10 years ago

Started in branch https://github.com/uwescience/myria/tree/janino-sandbox But it's not working, and I'm currently timed-out on this.

Since we don't let users supply any java code, we "should" be okay. But we should think hard about this and how to sandbox it.

dhalperi commented 9 years ago

@BrandonHaynes I think you had asked about sandboxing Janino?