sandbox

Possible to sandbox Python configuration file?

I'm thinking of implementing a configuration file written in Python syntax, not unlike what Django does. While I've seen one or two SO questions about the merits of using executable code in configuration files, I'm curious whether there is a way to execute the config file code in a "sandbox" to prevent mistakes in the code from locking ...

Advice on using sandbox vs. caching for UITableView async image download

Apple just released some sample code on lazy loading images in a UITableView a week ago. I checked it out and implemented it into my own UITableView (which is a drawRect one for fast scrolling), to see if there was a difference from what I was already doing. After implementing I am not sure what is best; the new code or what I already h...

Building a simple security sandbox on Windows 2008 by automatically creating & restricting user accounts?

I want to build a fairly simple security sandbox for an application hosting service - the main goals are thus: Applications running "in" the sandbox cannot install anything onto the system outside of the directory the executable is running in. Access to the system in general is denied (registry access, et al.). Access to the file syste...

security problem with Java ScriptEngine

I just started to use the Java ScriptEngine to do little extensions to my Application then i noticed that i can import all the java classes in the script and use them without restrictions. Is there a way to specify what classes a script can use? I dont want them to do things like java.lang.System.exit(1); ...

Strange failure of iPhone in-app purchase in sandbox - no NSError!

After searching through this forum and online for hours, I can't find an answer to the problem I'm having. Here's the basic scenario: Trying to make an in-app purchase in my app in the sandbox environment always fails. Getting the list of available products through SKProductsRequest works fine .. I get an array of valid SKProduct obje...

iPhone APNS Sandbox vs. Production for not yet approved apps

Is it true that the production APNS is unavailable until an app is approved to the app store? I can use the sandbox certificates fine, but production yields no results. ...

Problems loading XML file with swf on my site?

I created a swf that I have on my website. The swf loads xml data. it works fine when I test it locally. But when I upload it to the server, I get a IOErrorEvent(). Why is this occurring? Here is the code for the XML file: <?xml version="1.0" encode="UTF-8"?> <menu> <col>///~~~~~~~~~~~~~~~~~~~~~~~ <tile> ///The "thumb" tag should indi...

Want to learn about Sandboxing

Hello, I want to learn more about sandboxing. Not just about it. I want to learn such that I will be able to write a simple sandbox. Surprisingly, there isn't any information available anywhere. Even the Wikipedia article is not good. Can any one please suggest me good material. I know that its very advanced level concept. So, what ar...

Is there a lightweight, programmable Sandbox API for the Windows platform?

To run untrusted code at home I use a VMWare virtual machine. I want to find an alternate lightweight sandbox API for running untrusted applications, without the overhead of installing VMWare, or any other kind of end-user virtualization tool like that. (Edit: I don't want it to host an OS - I want it to run untrusted apps). Ideally the...

SWF Loader & Flex's SWFLoader: child SWF sandboxing policy

REF: http://livedocs.adobe.com/flash/9.0/ActionScriptLangRefV3/flash/display/Loader.html With regards to a parent SWF loading a child SWF via the Loader class, is it possible to prevent the loaded child SWF from: Making any network calls, or Making calls to specific domains Basically, I'm looking for a programmatic version of allowN...

Sandboxed Javascript Execution in an Internet Explorer Extension (BHO)

Firefox has the Sandbox and evalInSandbox(). Chrome has sandboxed execution in their content scripts (they call it isolated execution). I'm looking for the same thing in an IE browser extension. I can load a javascript file, then call evalScript(), but the code executes in the same environment as javascript that exists on the page. I ne...

Restrict native code functionality from Java

Hello all, I have a java application which uses JNI in some parts to do some work. It follows the usual loading of DLL and then calling native methods of DLL. Is there any way we can restrict what native methods can do from the java application? For example, can we restrict DLLs not to open any files or not to open any sockets even if i...

Running process as a user from windows service failing with Access is Denied?

I am working on a project that requires sandboxing an application. I am able to create a windows user, create a directory, fill the directory with an application, and run the application as a user. This works completely fine running as a console application, but when I install it as a service, I get this exception: System.ComponentModel...

Which programming languages support hot code swapping and/or sandboxing?

Hello, I would like to write a web based MMO game that will allow users to write AI and run it as part of the game. I plan to use Html5 for graphics and want this to be web based so it can be accessed from smartphones. I need to find a programming language that will support sandboxing, concurrency, hot code swapping, and a large librar...

stuck with sandbox account

I created a test account to check in app purchases. I could purchase and the purchase was successful. After that I found a bug in navigation. I fixed a bug, created another account and deleted the account I logged in in previous session. Now I cannot test the in app purchases anymore, since the app store log me in automatically with a gh...

What is sandboxing?

I have read the Wikipedia article, but I am not really sure what it means, and how similar it is to version control. It would be helpful if somebody could explain in very simple terms what sandboxing is. ...

How to lock down (or sandbox) JDK's built-in Javascript interpreter to run untrusted scripts

Hi, we have a Java application and would like to run untrusted code using the built in Javascript interpreter (javax.script.*) However by default the interpreter allows access to any java class. For example "java.lang.System.exit(0)" in the script will shutdown the JVM. I believe this is called "Live Connect", see Sun's "Java Scripting ...

Code solution to prevent production in app purchase from using sandbox?

I have an issue where a live app is using in app purchase. Everything tested well and for the most part seems to be working well in the app sold from iTunes. Recently I have had 2 reported cases of users who cannot use in app purchase in the live app because iTunes is asking them to purchase from the sandbox. The sandbox requires a tes...

Javascript Sandbox unit testing

I am using QUnit, which is excellent. I have enclosed my JS app in the (function () {})(); sandbox. This hides a lot of code that I don't want public, but I also need to test that code. Here is an example of how this works: (function () { var PublicAPI = window.PublicAPI = {}; PublicAPI.publicFunction = function (fo...

UIImage Saving image with file name on the iPhone

How can I save an image (like using UIImageWriteToSavedPhotosAlbum() method) with a filename of my choice to the private/var folder? ...