[Zope-dev] does zope 3 still have a restricted python environment?

Chris Withers chris at simplistix.co.uk
Mon Nov 19 10:05:36 EST 2007


Chris Withers wrote:
> I know we have security proxies nowadays and I'm hoping these have made
> things much more efficient that the old Zope 2 way of doing things
> (anyone have any ideas on this?) but is there still a way of running a
> piece of python in an environment where imports are controlled and
> "dangerous" builtins (ie: ones that would allow you to circumvent the
> security policy) are restricted?

Okay, I see two potentially interesting things:

http://svn.zope.org/zope.security/trunk/src/zope/security/untrustedpython/

and

http://svn.zope.org/RestrictedPython/trunk/src/RestrictedPython/

Are either of these still in use/maintained?

cheers,

Chris

-- 
Simplistix - Content Management, Zope & Python Consulting
            - http://www.simplistix.co.uk


More information about the Zope-Dev mailing list