Re: [Radiant] Sandboxing

2009-09-01 Thread Charlie Robbins
There was an extension called Backdoor that I used about a year ago that
allowed the evaluation of ERB inside Radius tags. It didn't do any
sandboxing though, so you left yourself wide open (I guess that's why it was
called backdoor). Hope that helps some.

Charlie

On Tue, Sep 1, 2009 at 9:03 AM, Jeff Casimir wrote:

> Hi all,
>
> This morning I was thinking about a project where I want users to be
> able to create flexible reports using Ruby/ERB and wondering how that
> might integrate into Radiant.
>
> Has anyone done or seen work with sandboxing ERB inside your Radiant
> pages?  I'd want to expose a lot of Ruby to the user, but I wouldn't
> want them able to call "system", for instance, or do some in-line
> monkey-patching of the object tree.
>
> Thoughts?
>
> - Jeff
>
> ---
> Jeff Casimir
> Jumpstart Lab by Casimir Creative, LLC
> http://jumpstartlab.com
> @jumpstartlab on twitter
> JavaScript Jumpstart - Sep 12 - Intermediate Javascript Programming & UI
> Robotics Jumpstart - Sep 13 - Intro to Robotics with Lego Mindstorms NXT
> Ruby Jumpstart - Sep 26&27 - Intro to Programming with Ruby
> ___
> Radiant mailing list
> Post:   Radiant@radiantcms.org
> Search: http://radiantcms.org/mailing-list/search/
> Site:   http://lists.radiantcms.org/mailman/listinfo/radiant
>
___
Radiant mailing list
Post:   Radiant@radiantcms.org
Search: http://radiantcms.org/mailing-list/search/
Site:   http://lists.radiantcms.org/mailman/listinfo/radiant


[Radiant] Sandboxing

2009-09-01 Thread Jeff Casimir
Hi all,

This morning I was thinking about a project where I want users to be
able to create flexible reports using Ruby/ERB and wondering how that
might integrate into Radiant.

Has anyone done or seen work with sandboxing ERB inside your Radiant
pages?  I'd want to expose a lot of Ruby to the user, but I wouldn't
want them able to call "system", for instance, or do some in-line
monkey-patching of the object tree.

Thoughts?

- Jeff

---
Jeff Casimir
Jumpstart Lab by Casimir Creative, LLC
http://jumpstartlab.com
@jumpstartlab on twitter
JavaScript Jumpstart - Sep 12 - Intermediate Javascript Programming & UI
Robotics Jumpstart - Sep 13 - Intro to Robotics with Lego Mindstorms NXT
Ruby Jumpstart - Sep 26&27 - Intro to Programming with Ruby
___
Radiant mailing list
Post:   Radiant@radiantcms.org
Search: http://radiantcms.org/mailing-list/search/
Site:   http://lists.radiantcms.org/mailman/listinfo/radiant