sandbox

How can you run Javascript using Rhino for Java in a sandbox?

Part of our java application needs to run javascript that is written by non-developers. These non-developers are using javascript for data formatting. (Simple logic and string concatenation mostly). My question is how can I setup the execution of these scripts to make sure scripting errors don't have a major negative impact on the rest...

Translate algorithmic C to Python

I would like to translate some C code to Python code or bytecode. The C code in question is what i'd call purely algorithmic: platform independent, no I/O, just algorithms and in-memory data structures. An example would be a regular expression library. Translation tool would process library source code and produce a functionally equival...

Is It Possible to Sandbox JavaScript Running In the Browser?

I'm wondering if it's possible to sandbox JavaScript running in the browser to prevent access to features that are normally available to JavaScript code running in an HTML page. For example, let's say I want to provide a JavaScript API for end users to let them define event handlers to be run when "interesting events" happen, but I don'...

Can I set a different data directory for Internet Explorer?

In Google Chrome, I can provide the command-line argument --user-data-dir="..." to have Chrome use a different directory for state like cookies, cache, and so forth. This makes it possible to trivially load web pages from a "fresh" browser and simulate multiple independent users. How can I do the same thing with Internet Explorer (eith...

How can I try a new language or framework without installing it?

With so many languages and frameworks that exist, and with new ones appearing all the time, I don't have the time to download, install, and configure each one to evaluate it. In the past I've run across webapps that allow one to write or paste code into a window, and see the results in realtime in the browser, usually in a tutorial setti...

Recommendations for sandboxing inside PHP5 or alternatives?

I've been slowly working on a personnel project to run a webmud like game using extjs as my frontend. One of the design choices I made was to allow user-generated evaluated code for game logic. So when the player enters a new "room" a number of state scripts would be called along the lines of "has player been here before, should they b...

How to grant different permissions to various Java classes?

I have a Java application and I would like to make it extensible. To create an extension, developers within our company will write a Java class that implements a certain interface. They may also wish to write associated helper classes. I would like to load these extensions into the application without an outage. I would like to limit...

Is there a way to execute php code in a sandbox from within php

I want to execute a php-script from php that will use different constants and different versions of classes that are already defined. Is there a sandbox php_module where i could just: sandbox('script.php'); // run in a new php environment instead of include('script.php'); // run in the same environment Or is proc_open() the only ...

Adobe AIR 1.5 Sandbox + Motherboard Speaker

I'm curious if through AIR you could access your motherboard pc speaker? It's for an Alarm Type of program and would like pitch control so more than a simple beep. Can this be accomplished through AIR? Or if not in any web-based framework for that matter? Seems a bit tricky so I'd love to know if anyone has a solution. Thanks! ...

Secure, sandboxable user exposed programming language / environment?

Beyond offering an API for my website, I'd like to offer users the ability to write simple scripts that would run on my servers . The scripts would have access to objects owned by the user and be able to manipulate, modify, and otherwise process their data. I'd like to be able to limit resources taken by these scripts at a fine level (e...

Language in a Sandbox in Rails

I've found that there WAS a sandbox gem (created by the guys that made try ruby in your browser but it was compatible only with Ruby 1.8. Another problem is that I cannot find it anymore (it seems they stop serving the gem from the servers...). So, is there any secure way of running ruby in a sandbox (so you can run it from your browser...

Freezing the DOM to JavaScript: Overwriting DOM modification functions as no-ops

I'm writing a piece of code that requires the DOM of a website to remain frozen while arbitrary JavaScript runs. Attributes changing is fine but I can't have anything changing the original tag structure of the page! I know in JavaScript there are a base number of functions that can modify the DOM: appendChild( nodeToAppend ) cloneNode(...

Can a ClickOnce deployed application read files from disk?

Howdy, Can an application delivered via ClickOnce in .Net, read Excel and Access files from the users disk? I know the app is susposed to run in a sandbox, I am curious how partitioned this sandbox is from the rest of the system? Could the file be read from a network share as well as the users hard drive? There is an assumpti...

Is there a good browser based sandbox to practice Javascript?

I am looking for recommendations for a browser based javascript sandbox to practice some proof of concept code. ...

Is there a good browser based sandbox to practice regex?

I am looking for recommendations for a browser based regex sandbox to practice some proof of concept expressions. ...

Sandbox against malicious code in a Java application

In a simulation server environment where users are allowed to submit their own code to be run by the server, it would clearly be advantageous for any user-submitted code to be run in side a sandbox, not unlike Applets are within a browser. I wanted to be able to leverage the JVM itself, rather than adding another VM layer to isolate the...

Loading Assemblies from a .Net Application in a 'Sandbox Environment'

I am currently developing an application in where a user will dynamically choose dlls and the application will execute some of the methods in that dll. (if you follow the first link, you will see that I am developing a sort of Robocode game application using the .Net Framework). For example, when the battle starts, the run method from ...

Is there an alternative to rexec for Python sandboxing?

Implementing a 'sandbox' environment in Python used to be done with the rexec module (http://docs.python.org/library/rexec.html). Unfortunately, it has been deprecated/removed due to some security vulnerabilities. Is there an alternative? My goal is to have Python code execute semi-trusted Python scripts. In a perfect world, calls to...

Can Silverlight contain ActiveX?

Howdy and Thanks in Advance! I'm trying to access the USB port from a Silverlight Application. Because Silverlight runs in the sandbox, it isn't able to do so. Is it possible to run an ActiveX control from inside a Silverlight Application? (Preferably not an overlay) If so: What examples exist? What are the best practices for this...

Cross Domain policy file forActionscript 3.0

I need to access an ASP.Net2 page from Action Script 3.0 and I wrote the code in .fla file that access the asp.net page but there is a problem in the accessing it reports to me the following error : Error opening URL 'http://localhost/Trial/Default.aspx' Error #2044: Unhandled ioError:. text=Error #2032: Stream Error. URL: http://localh...