RetroSearch Browse

Mon Feb 23 04:28:21 CET 2009 · https://mail.python.org/pipermail/python-dev/2009-February/086380.html

On Feb 22, 2009, at 9:43 PM, Guido van Rossum wrote:
> I'm not familiar with Genshi -- what is the purpose of the AST
> transformation here?

Sorry, I should have been clearer. If the only goal is to provide a  
restricted bare interpreter, you can certainly just exec with a  
restricted set of builtins and no __import__. Since Tav mentioned  
wanting restricted execution of Genshi templates in particular (which  
have a rather complicated mechanism for executing inline Python code),  
I threw together a realistic, self-contained 'restricting Genshi' demo  
which doesn't rely on outside restrictions, such as those provided by  
GAE.

You can ignore the AST stuff; Genshi does it for its own (non- 
security) purposes.

--
Ivan Krstić <krstic at solarsail.hcs.harvard.edu> | http://radian.org

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from https://mail.python.org/pipermail/python-dev/2009-February/086380.html below:

[Python-Dev] Reviving restricted mode?