[Python-Dev] Implementing restricted Python in Zope2

Terry Reedy tjreedy at udel.edu
Thu Jul 17 23:38:44 CEST 2008



Benjamin Peterson wrote:
> On Thu, Jul 17, 2008 at 4:10 PM, Sidnei da Silva
> <sidnei at enfoldsystems.com> wrote:
>
>> """
>> The safety of RestrictedPython has been validated in a somewhat formal
>> process with Python 2.4.  Ranjith is working to validate it with
>> Python 2.5.  He is first working to discover all changes between
>> Python 2.4 and 2.5 that might have affected the safety of a
>> RestrictedPython sandbox. Any changes to the AST, builtin functions,
>> methods of builtin types, etc., need to be evaluated for safety.
>>
>> So, in general, he is looking for detailed lists of changes between
>> Python 2.4 and 2.5--more than the "What's New" doc.
>> """
> 
> Then I would recommend he look at Misc/NEWS. If he needs more
> information, *specific* questions will bring the best results.

Ultimately, he can do a diff of the corresponding C files, and read the 
checkin messages that hopefully explain some of the changes.



More information about the Python-Dev mailing list