[Chicago] built app to auto-generate UI for scripts.

[Joe Germuska]

Hey, Paul:

I don’t have direct experience, but see
https://wiki.python.org/moin/SandboxedPython
and
https://wiki.python.org/moin/Asking%20for%20Help/How%20can%20I%20run%20an%20untrusted%20Python%20script%20safely%20%28i.e.%20Sandbox%29

Joe

On Jul 15, 2014, at 1:33 PM, Paul Katsen <pkpp1233 at gmail.com> wrote:

> any advice on how to sandbox even more? i know sites like Udacity and Coursera are running arbitrary code too.
> 
> 
> On Tue, Jul 15, 2014 at 1:21 PM, Japhy Bartlett <japhy at pearachute.com> wrote:
> you're kind of sandboxed at least because you're running in docker, but this is very vulnerable to malicious code!
> 
> import subprocess
> subprocess.call('whoami')
> 
> 
> > root
> 
> 
> On Tue, Jul 15, 2014 at 1:06 PM, Paul Katsen <pkpp1233 at gmail.com> wrote:
> Hey ya'll. 
> 
> I kept needing to teach non-engineers how to use the terminal to run scripts. Decided to just hack up a site last week where you can copy/paste your script in, select inputs for your script, and you get a shareable link to run your code.
> 
> Check it out - would love your feedback: https://python.blockspring.com/.
> 
> -Paul
> 
> _______________________________________________
> Chicago mailing list
> Chicago at python.org
> https://mail.python.org/mailman/listinfo/chicago
> 
> 
> 
> _______________________________________________
> Chicago mailing list
> Chicago at python.org
> https://mail.python.org/mailman/listinfo/chicago
> 
> 
> _______________________________________________
> Chicago mailing list
> Chicago at python.org
> https://mail.python.org/mailman/listinfo/chicago

-- 
Joe Germuska
Joe at Germuska.com * http://blog.germuska.com * http://twitter.com/JoeGermuska    

"Learn to fear any church that fears drums." --Regie Gibson

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/chicago/attachments/20140715/9f421afb/attachment.html>