I'm implementing an IRC bot that can run arbitrary APL expressions. Since this bot can run code submitted by anyone, I need to ensure that the code can't affect the system where the APL expressions are executed.
This is the purpose of the --safe flag, but I have noted that several destructive operations are still permitted when using this flag.
In particular:
- SQL operations
- FILE_IO
- )OUT
- )DUMP, )DUMPV, )DUMP-HTML
- )COPY, )LOAD, etc…
- )HOST
There is probably more, but preventing these would be a good start.
Regards,
Elias