<?xml version="1.0" encoding="windows-1252"?>
<node id="930682" title="Re^4: Embedded scripting sandbox? Lua?" created="2011-10-10 13:29:04" updated="2011-10-10 13:29:04">
<type id="11">
note</type>
<author id="890813">
cavac</author>
<data>
<field name="doctext">
In my mind, there are goot reasons for it. The scripts are provided by users of a webpage. While Perl is the swiss army knife of programming languages, in this case that versatility makes in unusuable - it's practically impossible to make it really secure while allowing it to interact with the webserver through a defined API.&lt;br&gt;
&lt;br&gt;
A language like LUA is designed as a plugin to work on a given set of data and call a predefined API to the host system. Same as javascript does (or in case of IE "should do").&lt;br&gt;
While this is by no means a guarantee that it will be safe and secure, using a limited functionality sandbox makes it much easier for a small team (in my case: one man team) to keep an overview of what is and isn't possible for the user. I'm pretty sure this is a matter for discussion and possible flame wars - and i'm pretty sure that a larger team could come up with a better solution.&lt;br&gt;
&lt;br&gt;
Please, don't understand this as anything else than stating my point of view and explaining the reasons for why i'm tending towards LUA - i'm not trying to start a flamewar[*].&lt;br&gt;
&lt;br&gt;
[*] Although we could if you like. I'm prefering IRC in that case, since i have an IRC bot for that. No, no, wait, it still uses Net::IRC, i should really rewrite that thing sometime soon... (bleep), before taking over the world i really need to hire some henchmen...&lt;br&gt;

&lt;!-- Node text goes above. Div tags should contain sig only --&gt;
&lt;div class="pmsig"&gt;&lt;div class="pmsig-890813"&gt;
Don't use '#ff0000':&lt;br&gt;
use Acme::AutoColor; my $redcolor = RED();&lt;br&gt;
&lt;i&gt;All colors subject to change without notice.&lt;/i&gt;
&lt;/div&gt;&lt;/div&gt;</field>
<field name="root_node">
929344</field>
<field name="parent_node">
929545</field>
</data>
</node>
