sandbox

Sandbox architecture in ASP.NET?

Is it possible to develop a web-app in ASP.NET (framework is not a constraint), to have a sandbox architecture, and deploy widgets without disturbing the parent application? I expect both the parent application and the widget to be developed using .NET. EDIT: To elaborate, I want to have an web-app, say App1, and widgets (say wid1 and ...

git sandbox for anyone to pull/push to ?

Is there a git repository out there on github or elsewhere that allows anyone read write access solely for the purpose of trying out git commands (aka git sandbox)? One can easily set up their own repository, but a single-person repository does not allow for a fuller range of trying out commands, and a multiple-person repository usually...

Sharepoint 2010 Publishing Image Field in a sandboxed solution

Hello, I am trying to read a list that contains a field of type Publishing Image in a sandbox webpart. However as soon as I reference the field with the following line, I get an error. SPList List = Web.Lists["ListName"]; SPItem Item = List.GetItemByID(1); Object o = Item["Image"]; The error is the type Publishing.Image is not marked...

SAFE levels in JRuby

Are SAFE levels supported in JRuby? If not, is there other ways of safely running user supplied code in server? ...

Create java sandbox based on security policies

I need to create environment to run potentially untrusted code. Program allowed to connect to preconfigured address:port and nothing else (even read the system time). I have compiled the class whitelist. I'd searched similar questions, but found only template that based on SecurityManager which AFAIK is deprecated. Can anybody give me a ...

global security manager in flex

hi, I made a swf that interacts with other site on the internet (which has a crossdomainfile for me). in the main.mxml there is a definition of webservice (mx:WebService)(which is not in my domain). Therefore when loading the swf, there is a first call to crossdomainfile.xml. I put this swf on my server so that my clients can get it. Whe...

Flash Player, security: If a URL starts with "http://" will the SWF always be loaded into REMOTE sandbox?

Seems to be a question for a Flash security guru. Suppose we are loading an external SWF movie with MovieClipLoader.loadMovie(url:String) Is it safe to assume that if url starts with "http://", the movie will be loaded in REMOTE sandbox? We need to tell local SWFs from remote ones to close a security hole. If you need the context read...

Javascript Sandbox

I want to have developers write some custom apps for a site in Javascript but I want to sandbox it so they can't do anything naughty like redirect the user, set the body display to none etc etc. I have a namespace in Javascript where all the functions they'll ever need exist in there so I was thinking to create a sandbox would be a matte...

How to create sandbox in C# for external process?

How to create sandbox in C# for external process? As sandbox i understand an environment for process i start from C#, that stop that process from interfering with anything else - kernel, system variables, system configuration, memory, registry, disk, hardware, location other than starting place and so on. I want place executable in one p...

sandboxed web parts inside SharePoint 2010

Is it possible to develop a web-part in ASP.NET (framework > 2.0), to have a sandbox architecture, and deploy those web parts inside Share Point 2010 and/or MOSS 2007 we donot want to use any SharePoint dll reference with web parts we develop. we refer to the url, section at http://msdn.microsoft.com/en-us/library/ee539417.aspx (secti...

How do you set up a virtual environment or sandbox for ruby without removing access to external API's?

I am running a bit of code that looks like this: result = system("ruby " + filename_random_ruby_script) if result save_to_disk(random_ruby_script) else # Do Nothing end The variable "random_ruby_script" represents any .rb file. This code is the first of many calls to system() and runs a ruby file that may also contain calls to sy...

Restrict some API in Embedded Groovy

Hello, I just embedded Groovy in my application and wondering if it's possible to restrict access to some APIs i.e. java.io.File, java.net.URL, etc Or instead of completely restricting java.io.File access, I want to ONLY allow access to certain directories on the machine. Any guidance is greatly appreciated! ...

Lua variable scoping with setfenv

I'm trying to use raw Lua files for configuration purposes, but don't want the config files polluting the global namespace. The problem I'm running into is that dofile always seems to execute in the real global environment, so external files just throw all their declarations into _G. Here's an example main file, with comments indicat...

how to return to my website from sandboxpaypal when unsubscribe

i m subscribe through my website using sandbox paypal test site and iwant/i have need to unsubscrinbe through same website the problem is that i cant get return url to back to the site from my payapl testing account.please reply me ...

Safe JavaScript Templates

I am looking to allow users to create templates to display their data, and these templates are to be rendered using JavaScript. I was wondering if it was possible to safely do this? I just need simple things like loops and if-else statements and of course accessing and printing values of variables in a given object. Are there any templa...

How can you gain access to a web page's event listeners from a Google Chrome extension

I'm writing a Chrome extension to list out the source code for each event handler attached to an <a/> tag when you roll over it. Currently, I've printed out the href attribute - $(this).attr("href") - and this works fine. The source code is on github at http://github.com/grantyb/Google-Chrome-Link-URL-Extension. When I extend it to ac...

C++ Sandboxing dynamic libraries

Hello all, I'm wondering if its at all possible to sandbox a dynamically linked library via dlopen and friends. The aim is to recover from an error within the library without tearing down the hole application e.g SEGFAULT, etc... Anyone had any experience in this area? Cheers ...

PHP - Sandboxing

Hi all, I want to limit what PHP functionality my users have access to. For instance there is an object $data and the user likes to use if for and echo. Obviously allowing him to write PHP would be a serious vulnerability. Is there any way to run this PHP in a sandbox or would you recommend any lightweight PHP template engine? ...

What is a good way to "sandbox" Ruby 1.8.6 and 1.9.1?

Nowadays I hope to have 2 Ruby versions on the same machine, because some gems are good for 1.8.6 only and at the same time, 1.9.1 is fast and it is to try out with Rails 2.3. Is there a good way to sandbox the two versions? I installed 1.9.1 onto C:\ruby and 1.8.6 onto C:\ruby1.8.6, and change inside of C:\ruby1.8.6\bin copy ruby.exe...

Google Checkout reports error to user but not admin

Hello I'm using the following to generate a Google Checkout: echo '<form method="POST" action="https://sandbox.google.com/checkout/api/checkout/v2/checkoutForm/Merchant/'.$id.'" accept-charset="utf-8">'; while ($row = mysql_fetch_array($result)) { echo '<input type="hidden" name="item_name_1" value="'.$row['name'].'...