Not Found

The requested URL was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

1#@!#!123s

: / opt / remi / php82 / root / usr / share / doc / pecl / luasandbox / docbook /

Filename : differences.xml

back

<?xml version="1.0" encoding="utf-8"?>
<!-- $Revision$ -->
<chapter xml:id="reference.luasandbox.differences" xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink">
 <title>Differences from Standard Lua</title>

 <para>
  LuaSandbox provides a sandboxed environment which differs in some ways from standard Lua 5.1.
 </para>

 <simplesect xml:id="reference.luasandbox.differences.unavailable">
  <title>Features that are not available</title>
  <para>
   <itemizedlist>
    <listitem>
     <para>
      <literal>dofile()</literal>, <literal>loadfile()</literal>, and the <literal>io</literal> package, as they allow direct filesystem access. If needed, filesystem access should be done via PHP callbacks.
     </para>
    </listitem>
    <listitem>
     <para>
      The <literal>package</literal> package, including <literal>require()</literal> and <literal>module()</literal>, as it depends heavily on direct filesystem access. A pure-Lua rewrite such as that used in the MediaWiki Scribunto extension may be used instead.
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>load()</literal> and <literal>loadstring()</literal>, to allow for static analysis of Lua code.
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>print()</literal>, since it outputs to standard output. If needed, output should be done via PHP callbacks.
     </para>
    </listitem>
    <listitem>
     <para>
      Most of the <literal>os</literal> package, as it allows manipulation of the process and executing of other processes.
     </para>
     <para>
      <itemizedlist>
       <listitem>
        <para>
         <literal>os.clock()</literal>, <literal>os.date()</literal>, <literal>os.difftime()</literal>, and <literal>os.time()</literal> remain available.
        </para>
       </listitem>
      </itemizedlist>
     </para>
    </listitem>
    <listitem>
     <para>
      Most of the <literal>debug</literal> package, as it allows manipulation of Lua state and metadata in ways that can break sandboxing.
     </para>
     <para>
      <itemizedlist>
       <listitem>
        <para>
         <literal>debug.traceback()</literal> remains available.
         </para>
       </listitem>
      </itemizedlist>
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>string.dump()</literal>, as it may expose internal data.
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>collectgarbage()</literal>, <literal>gcinfo()</literal>, and the <literal>coroutine</literal> package have not been reviewed for security.
     </para>
    </listitem>
   </itemizedlist>
  </para>
 </simplesect>

 <simplesect xml:id="reference.luasandbox.differences.modified">
  <title>Features that have been modified</title>
  <para>
   <itemizedlist>
    <listitem>
     <para>
      <literal>pcall()</literal> and <literal>xpcall()</literal> cannot catch certain errors, particularly timeout errors.
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>tostring()</literal> does not include pointer addresses.
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>string.match()</literal> has been patched to limit the recursion depth and to periodically check for a timeout.
     </para>
    </listitem>
    <listitem>
     <para>
      <literal>math.random()</literal> and <literal>math.randomseed()</literal> are replaced with versions that don't share state with PHP's <literal>rand()</literal>.
     </para>
    </listitem>
    <listitem>
     <para>
      The Lua 5.2 <literal>__pairs</literal> and <literal>__ipairs</literal> metamethods are supported by <literal>pairs()</literal> and <literal>ipairs()</literal>.
     </para>
    </listitem>
   </itemizedlist>
  </para>
 </simplesect>

</chapter>

<!-- Keep this comment at the end of the file
Local variables:
mode: sgml
sgml-omittag:t
sgml-shorttag:t
sgml-minimize-attributes:nil
sgml-always-quote-attributes:t
sgml-indent-step:1
sgml-indent-data:t
indent-tabs-mode:nil
sgml-parent-document:nil
sgml-default-dtd-file:"~/.phpdoc/manual.ced"
sgml-exposed-tags:nil
sgml-local-catalogs:nil
sgml-local-ecat-files:nil
End:
vim600: syn=xml fen fdm=syntax fdl=2 si
vim: et tw=78 syn=sgml
vi: ts=1 sw=1
-->

Name	Size	Last Modified	Owner	Permissions
luasandbox	Dir	September 02 2024 9:38:07	root	0755
luasandboxfunction	Dir	September 02 2024 9:38:07	root	0755
book.xml	2.469 KB	December 13 2023 11:34:49	root	0644
configure.xml	0.77 KB	December 13 2023 11:34:49	root	0644
constants.xml	0.669 KB	December 13 2023 11:34:49	root	0644
differences.xml	4.165 KB	December 13 2023 11:34:49	root	0644
examples.xml	2.178 KB	December 13 2023 11:34:49	root	0644
luasandboxerrorerror.xml	2.435 KB	December 13 2023 11:34:49	root	0644
luasandboxerror.xml	4.178 KB	December 13 2023 11:34:49	root	0644
luasandboxfatalerror.xml	2.521 KB	December 13 2023 11:34:49	root	0644
luasandboxfunction.xml	2.093 KB	December 13 2023 11:34:49	root	0644
luasandboxmemoryerror.xml	2.636 KB	December 13 2023 11:34:49	root	0644
luasandboxruntimeerror.xml	2.542 KB	December 13 2023 11:34:49	root	0644
luasandboxsyntaxerror.xml	2.423 KB	December 13 2023 11:34:49	root	0644
luasandboxtimeouterror.xml	2.658 KB	December 13 2023 11:34:49	root	0644
luasandbox.xml	3.495 KB	December 13 2023 11:34:49	root	0644
reference.xml	0.71 KB	December 13 2023 11:34:49	root	0644
setup.xml	1.943 KB	December 13 2023 11:34:49	root	0644
versions.xml	2.785 KB	December 13 2023 11:34:49	root	0644

2017 © D7net \| D704T team