I'm implementing an IRC bot that can run arbitrary APL expressions. Since
this bot can run code submitted by anyone, I need to ensure that the code
can't affect the system where the APL expressions are executed.

This is the purpose of the --safe flag, but I have noted that several
destructive operations are still permitted when using this flag.

In particular:


   - SQL operations
   - FILE_IO
   - )OUT
   - )DUMP, )DUMPV, )DUMP-HTML
   - )COPY, )LOAD, etc…
   - )HOST

There is probably more, but preventing these would be a good start.

Regards,
Elias

Reply via email to