lune-org/docs
1
0
Fork 0
mirror of https://github.com/lune-org/docs.git synced 2025-04-03 18:10:54 +01:00
Code Issues Projects Releases Packages Wiki Activity

docs: update sandbox snippet in docs

Browse source
This commit is contained in:
Erica Marigold 2024-05-16 11:08:23 +05:30
parent 45289f43e1
commit d5d9fc7d27
No known key found for this signature in database
GPG key ID: 2768CC0C23D245D1
1 changed files with 28 additions and 42 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

70
pages/getting-started/5-security.mdx
View file

@ -23,14 +23,16 @@ Copy the source below and place it in a file named `sandbox.luau`:
<summary>Click to expand</summary>
```lua copy
local datetime = require("@lune/datetime")
local fs = require("@lune/fs")
local luau = require("@lune/luau")
local net = require("@lune/net")
local process = require("@lune/process")
local regex = require("@lune/regex")
local roblox = require("@lune/roblox")
local serde = require("@lune/serde")
local stdio = require("@lune/stdio")
local task = require("@lune/task")
local regex = require("@lune/regex")
local datetime = require("@lune/datetime")
local processArgs = table.clone(process.args)
local filePath: string = table.remove(processArgs, 1)
@ -51,25 +53,6 @@ local SANDBOXED_ENV = {
local PROMPT_MSG_TMPL = `allow {SANDBOXED_ENV.debugName} to access %s?`
local DENIED_ERR_TMPL = `{SANDBOXED_ENV.debugName} tried to access disallowed library %s!`
local function constructSandboxMt(requirePath: string)
return function(self, key)
local module = require(requirePath)
return module[key]
end
end
local function constructProtectedLibMt(libName: string)
return function(self, key)
local allow: boolean = stdio.prompt("confirm", string.format(PROMPT_MSG_TMPL, libName))
if allow then
return constructSandboxMt(`@lune/{libName}`)(self, key)
end
error(string.format(DENIED_ERR_TMPL, "fs"))
end
end
local function discoverAndReadScript(filePath: string): string
local scriptContents: string
@ -118,29 +101,28 @@ end
local function sandboxPrint(...: any)
DEFAULT_PRINT(`---- Output from {SANDBOXED_ENV.debugName} ----`)
DEFAULT_PRINT(...)
DEFAULT_PRINT(tostring(...))
DEFAULT_PRINT(`---------------------------------------`)
end
local function constructProtectedMt<T>(library: T)
return {
__index = library,
__tostring = function()
return stdio.format(library)
end,
}
end
local SANDBOXED_LUNE_STD_LIB = {
["@lune/fs"] = setmetatable({}, {
__index = constructProtectedLibMt("fs"),
}),
["@lune/luau"] = setmetatable({}, {
__index = constructProtectedLibMt("luau")
}),
["@lune/process"] = setmetatable({}, {
__index = constructProtectedLibMt("process"),
}),
["@lune/fs"] = setmetatable({}, constructProtectedMt(fs)),
["@lune/luau"] = setmetatable({}, constructProtectedMt(luau)),
["@lune/process"] = setmetatable({}, constructProtectedMt(process)),
["@lune/stdio"] = setmetatable({
write = sandboxPrint,
ewrite = sandboxPrint,
}, {
__index = constructSandboxMt("@lune/stdio"),
}),
["@lune/net"] = setmetatable({}, {
__index = constructProtectedLibMt("net"),
}),
}, constructProtectedMt(stdio)),
["@lune/net"] = setmetatable({}, constructProtectedMt(net)),
["@lune/roblox"] = setmetatable({
getAuthCookie = function(...)
local allowAuthCookie: boolean = stdio.prompt(
@ -149,7 +131,7 @@ local SANDBOXED_LUNE_STD_LIB = {
)
if allowAuthCookie then
local getAuthCookie = constructSandboxMt("@lune/roblox")({}, "getAuthCookie")
local getAuthCookie = require("@lune/roblox").getAuthCookie
return getAuthCookie(...)
end
@ -157,9 +139,7 @@ local SANDBOXED_LUNE_STD_LIB = {
`{SANDBOXED_ENV.debugName} attempted to access .ROBLOSECURITY token even when denied`
)
end,
}, {
__index = constructSandboxMt("@lune/roblox"),
}),
}, constructProtectedMt(roblox)),
["@lune/serde"] = serde,
["@lune/task"] = task,
["@lune/regex"] = regex,
@ -170,7 +150,13 @@ local function sandboxedRequire(path: string)
local module = SANDBOXED_LUNE_STD_LIB[path]
if module then
return module
local allowed: boolean = stdio.prompt("confirm", string.format(PROMPT_MSG_TMPL, path))
if allowed then
return module
end
error(string.format(DENIED_ERR_TMPL, path))
else
local contents = discoverAndReadScript(path)