Andrew Dunstan <andrew@dunslane.net> writes:
> David Blewett wrote:
>> I brought this up last August [1]. Zope has a working sandbox that
>> they include in their distribution.
>> http://archives.postgresql.org/message-id/9d1f8d830808041008v50104fd8p6181d5ddce85a6a@mail.gmail.com
> How many python installations have this gadget? If the answer is "not
> many" then it's not much good to us, unless someone wants to create
> PL/zope-sandbox. Really, something like this should be part of a
> standard python installation.
Yeah. For one thing, how much trust can you put in a security mechanism
that hasn't been accepted upstream? Given the history of this sort of
thing in Python, I'm not prepared to just assume that Zope got it right.
regards, tom lane