Hacker News Reader

Full thread

jakobson14

Sounds a lot like TCL's Safe interps?

View on HN

Yeah, first thing that came to my mind too. Though at a deeper level than simply replacing global procs.

Overview for unfamiliar readers:

https://www.tcl.tk/software/plugin/safetcl.html

https://wiki.tcl-lang.org/page/Config+file+using+slave+inter...

Still blows my mind that TCL includes a firewall and virtual filesystem layer.

https://wiki.tcl-lang.org/page/firewall

https://wiki.tcl-lang.org/page/VFS

https://wiki.tcl-lang.org/page/tclvfs

You can even build a FUSE filesystem in TCL!

Oh, side note: Safe interps now have available time limits and a few other measures, though it seems memory allocation limits are a harder nut to crack due to all the places a memory allocation can occur in the TCL interpreter.

https://www.tcl-lang.org/man/tcl8.5/TclCmd/interp.htm#M46

Reply on news.ycombinator.com