<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.18.2">
</HEAD>
<BODY>
Howdy all,<BR>
<BR>
<BR>
In a short inspection into the plugin code I found an interesting implementation in the KX_PythonInit.cpp file: sandboxing!<BR>
<BR>
Well, not a complete sandbox but it disables the "open" function and overwrite the "import" in such a way only trusted packages (GameLogic, GameKeys, PhysicsConstraints, Rasterizer and Mathutils) can be imported.<BR>
<BR>
 Python gurus: is this a safe/sane approach? Can a sandbox like this be called safe in the web environment (ie, it can't be used to cause real damage into the system)? Wouldn't be great if the game engine came with other modules? For the plugin code, I'd mostly like to have at very least XML processing (to be honest, I'd love to have CORBA too). It'd be awesome if we could give our users some method for installing such extensions.<BR>
<BR>
<BR>
Regards,<BR>
<BR>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<IMG SRC="cid:1219874066.8392.3.camel@leibniz.escritorio.ydeabr.com" ALIGN="bottom" ALT="Ydea Desenvolvimento de Software LTDA." BORDER="0"><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#0090ff">Marcelo Coraça de Freitas </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#0090ff">Gerente de TI </FONT></FONT><BR>
<BR>
<FONT SIZE="2"><FONT COLOR="#0090ff">Ydea Desenvolvimento de Software LTDA. </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#0090ff">Av. Adolfo Pinheiro, 2338 - Alto da Boa Vista </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#0090ff">CEP.:04734-004 - São Paulo - SP </FONT></FONT><BR>
<FONT SIZE="2"><FONT COLOR="#0090ff">Tel.: 55-11-5523-0333 </FONT></FONT>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>