Comment on An unexpected Redis sandbox escape affecting Debian-based distrosparentComments−adamc4yNot really usually to call something "overly paranoid" without going into why you think their evaluation is wrong.−tedunangst4yThe page is trying to build a sandbox where a lua script can eval other untrusted lua code within the same lua execution environment. Many, even most?, people are only interested in isolating the host application from the lua environment.−josephcsible4yBecause there's ways to build safe sandboxes that allow untrusted code to use a bunch of things that it calls unsafe.
Comments
Not really usually to call something "overly paranoid" without going into why you think their evaluation is wrong.
The page is trying to build a sandbox where a lua script can eval other untrusted lua code within the same lua execution environment. Many, even most?, people are only interested in isolating the host application from the lua environment.
Because there's ways to build safe sandboxes that allow untrusted code to use a bunch of things that it calls unsafe.