Re: [guile-user] Sandboxing?

[Keisuke Nishida]

At Mon, 19 Mar 2001 17:23:59 +0000 (/etc/localtime),
Kyle Cronan wrote:
> 
> Ok, I decided to use this approach.  I have some C code that takes some
> scheme code from a cgi and calls gh_eval_str on something like this:
> 
> (eval '(begin <formcode>) (safe-environment 5))
> 
> My problem is the procedures I have defined with gh_new_procedure are
> unbound in this environment.  Ideally, it would be nice to have a way to
> evaluate everything passed to gh_eval_str within a safe environment.  Or
> is there some way I can get the C procedures available to the eval
> statement above?

Hmm, you could import your procedures into the safe environment:

  (define custom-environment (safe-environment 5))

  (module-define! custom-environment 'hello (lambda () "Hello"))

  (eval '(hello) custom-environment)  => "Hello"

Or you could define your custom module:

  ---- custom-environment.scm ----------
  (define-module (custom-environment)
    :pure
    :use-module (ice-9 safe-r5rs))

  (define (hello) "Hello")
  --------------------------------------

Then

  (eval '(hello) (resolve-module '(custom-environment))) => "Hello"

I don't know how to do this using the GH interface, sorry.

Kei