Questions tagged [sandbox]

Sandbox is a security mechanism for containing untrusted programs. Such programs could contain malicious code, which would harm the user's system.

In computer security, a sandbox is a security mechanism for separating running programs. It is often used to execute untested code, or untrusted programs from unverified third parties, suppliers, untrusted users and untrusted websites.

Web Browsers such as and using varying sandboxing techniques, to protect the users from malicious code infecting the system.

Other common types of software which use sandboxing techniques are Virtualization software. Which allow a user to run programs within a confined environment, known as the Guest OS. The Guest OS is hosted on the Host OS, which is the main Operating System running on the system. Any harm or damages caused by any malicious programs hosted on the Guest OS, will be contained within thus not spreading to the Host OS. Thus allowing the user to resume his work without experiencing any setbacks.

Chat Room

Chat about sandbox with other Stack Overflow users

2481 questions
27
votes
2 answers

Safe execution of untrusted Haskell code

I'm looking for a way to run an arbitrary Haskell code safely (or refuse to run unsafe code). Must have: module/function whitelist timeout on execution memory usage restriction Capabilities I would like to see: ability to kill thread compiling…
Tener
  • 5,280
  • 4
  • 25
  • 44
27
votes
4 answers

Instagram API doesn’t find any liked posts for sandbox users

I’m using the Instagram API in sandbox mode. I’m trying to access a User’s liked posts from the Instagram API using their authenticated access token. This user is one of the accepted sandbox users for my app, and has liked some posts. If I call…
coderz
  • 1,366
  • 1
  • 12
  • 23
27
votes
6 answers

Preventing Python code from importing certain modules?

I'm writing an application where users can enter a python script and execute it in a sandbox. I need a way to prevent the exec'ed code from importing certain modules, so malicious code won't be as much of a problem. Is there a way to do this in…
Nir
27
votes
4 answers

iOS In App Purchase: test a real purchase without submitting to Apple

I implemented in app purchase in my iOS app and I want to do a real test (not a sandbox) before submitting this new version to Apple Of course, the current version of the app (in the App Store) was validated with a product So, I archived the app…
27
votes
1 answer

Mac OS app, sandbox with command line tool?

I've made an app which includes a command-line tool. I have enabled the app's sandbox, and tested that it works. I've also code-signed both the app and the command line tool. But when I upload the app to iTunes, I received a email telling me "App…
dinosaur
  • 638
  • 5
  • 14
26
votes
7 answers

How can I try a new language or framework without installing it?

With so many languages and frameworks that exist, and with new ones appearing all the time, I don't have the time to download, install, and configure each one to evaluate it. In the past I've run across webapps that allow one to write or paste code…
flamingLogos
  • 5,971
  • 4
  • 37
  • 44
24
votes
2 answers

Good implementation of scalable JavaScript application architecture (Sandbox by Nicholas Zakas)?

I recently watched a good video with regards to a modular JavaScript architecture including a sandbox. I was wondering if there is anything that's been implemented in the wild? Is the framework downloadable or an implementation of it? The videos…
Martin
  • 23,844
  • 55
  • 201
  • 327
24
votes
3 answers

Is possible to use Mac OS X XPC like IPC to exchange messages between processes? How?

According to Apple, the new XPC Services API, introduced in Lion, provides a lightweight mechanism for basic interprocess communication integrated with Grand Central Dispatch (GCD) and launchd. It seems possible to use this API as a kind of IPC,…
poorDeveloper
  • 495
  • 2
  • 6
  • 11
24
votes
10 answers

Is there a good browser based sandbox to practice regex?

I am looking for recommendations for a browser based regex sandbox to practice some proof of concept expressions.
Noah
  • 15,080
  • 13
  • 104
  • 148
24
votes
2 answers

Mac OS X app crash with Code Signature Invalid error

I write an app for OS X and when I archive the app and export it as an application and try to open then it crashes with Code Signature Invalid error. I have created Mac App Distribution, Mac Installer Distribution, Developer ID Application,…
Bartosz Bialecki
  • 4,391
  • 10
  • 42
  • 64
23
votes
3 answers

Can you update a sandboxed Mac app using Sparkle or something similar?

For those distributing Mac apps outside the Mac App Store, how are you planning to support updating and sandboxing? I'm guessing most people's answers for the time being is that they're not, but I hope that eventually non-MAS apps could be sandboxed…
c-had
  • 1,380
  • 1
  • 9
  • 18
22
votes
9 answers

Secure way to run other people code (sandbox) on my server?

I want to make a web service that runs other people's code locally. Naturally, I want to limit their code's access to a certain "sandbox" directory, so that they won't be able to connect to other parts of my server (DB, main webserver, etc.) What's…
amitkaz
  • 2,732
  • 1
  • 20
  • 18
22
votes
7 answers

Is there a way to execute php code in a sandbox from within php

I want to execute a php-script from php that will use different constants and different versions of classes that are already defined. Is there a sandbox php_module where i could just: sandbox('script.php'); // run in a new php environment instead…
Bob Fanger
  • 28,949
  • 7
  • 62
  • 78
22
votes
2 answers

How to disable sandbox mode in new facebook app developer?

Question 1: Is this the correct way to to disable sandbox mode in the new facebook app developer dashboard? a) Go to the "Status & Review" section. b) Select "Yes" after the text "Do you want to make this app and all its live features available to…
Gerald LeRoy
  • 1,227
  • 2
  • 11
  • 17
22
votes
1 answer

Can you sign a Java applet but keep it in the sandbox (NOT give it full access to user's computer)?

Thanks to Oracle's latest changes, it appears I have to sign an applet even though I don't need or want it to have unrestricted access to the user's computer (which is why its currently unsigned). In particular, I don't want the warning they show…
Garret Harrison
  • 391
  • 3
  • 9