eval to dict problems NEWB going crazy !

Fredrik Lundh fredrik at pythonware.com
Mon Jul 10 12:19:48 EDT 2006


Ant wrote:

> So how do python app's typically embed python? For example things like
> Zope and idle are scripted using Python - presumably they restrict the
> execution of the scripts to a restricted set of modules/objects - but
> how is this done?

why?  anyone capable of adding code to idle already has access to 
everything that code can access...

> Perhaps idle doesn't require safety from untrusted code, but surely
> Zope does. So there must be some way of executing arbitrary untrusted
> code in an app within some kind of sandbox...

afaik, zope uses a custom parser.

</F>




More information about the Python-list mailing list