I think it's about time we added LuaSandbox to PECL.

This is an extension that I wrote back in 2011. Since then, it's had
contributions from a few other WMF staff members. We run it in WMF
production, and we recommend it to non-WMF users of MediaWiki. As of
earlier this year, it's in Debian and Ubuntu. Adding it to PECL is not
necessary for our operations, but it would improve its discoverability.

It has different objectives to the existing pecl/lua extension. It
focuses on allowing the execution of code supplied by untrusted users,
and as a result, has support for time and memory limits. The interface
is more complex, precise and powerful than pecl/lua, but less convenient.

In my opinion, it's not feasible to merge the two extensions.

It lacks a DocBook manual, but we could convert the existing Doxygen
manual to DocBook after the extension is in PECL.

For more about LuaSandbox see:

https://www.mediawiki.org/wiki/LuaSandbox

The canonical location of the LuaSandbox source is in our Gerrit instance:

git clone \
https://gerrit.wikimedia.org/r/p/mediawiki/php/luasandbox.git

There is a GitHub mirror:

https://github.com/wikimedia/mediawiki-php-LuaSandbox

I have a VCS account and a PEAR account already, but no PECL account.

-- Tim Starling

-- 
PECL development discussion Mailing List (http://pecl.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to