Comment

Comment by ptx

Is this sandbox intended as a security feature?

According to the Redis documentation [1], "The sandbox attempts to prevent accidental misuse [...] Scripts should never [...] attempt to perform any other system call other than those supported by the API".

(Also "reduce potential threats", but that doesn't sound like the primary purpose or a particularly strong claim of security.)

[1] https://redis.io/topics/programmability

parent ptx 4 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton