views:

39

answers:

0

I'm looking for a way to execute user submitted python code in GAE in a secure fashion (much stricter then the GAE sandbox).

RestrictedPython would certainly fit the shoe, being used in Zope for the exakt same purpose.

But RestrictedPython relies on modifying the AST (abstract syntax tree) which means loading modules from the compiler (I get as far as loading the parser module before the SDK complains).

Has anyone else done any work with this for Google App Engine?