Thanks for your response.<div><br></div><div>But what happens with the python code? Does not exist a way to write some scripts that can do some damage to my app, the server, the database, etc?</div><div><br></div><div>Thanks again,</div>
<div>Nicolas</div><div><br><div class="gmail_quote">On Mon, Nov 2, 2009 at 9:41 PM, Dino Viehland <span dir="ltr"><<a href="mailto:dinov@microsoft.com">dinov@microsoft.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">After creating your app domain you can do:</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">ScriptEngine engine = Python.CreateEngine(someAppDomain);</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">And then the rest of your code should work as it’s written.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt">
<a href="mailto:users-bounces@lists.ironpython.com" target="_blank">users-bounces@lists.ironpython.com</a> [mailto:<a href="mailto:users-bounces@lists.ironpython.com" target="_blank">users-bounces@lists.ironpython.com</a>] <b>On
Behalf Of </b>Nicolás Buttarelli<br>
<b>Sent:</b> Monday, November 02, 2009 12:39 PM<br>
<b>To:</b> <a href="mailto:users@lists.ironpython.com" target="_blank">users@lists.ironpython.com</a><br>
<b>Subject:</b> [IronPython] Safe execution of python scripts on my .net
application</span></p>
</div>
</div><div><div></div><div class="h5">
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Sorry,
I don't know if my previous message have arrived. So, here it is:</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt">Hello
all,</span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">I
am starting with python and I would like to add to my web application some web
services. This services will allow the different clients of my application to
execute some python scripts. </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">I
would like to know if someone did this before and how can I do this in a secure
way. I mean, how can I do to restrict the environment where the scripts will be
executed. </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">In
.net I can do this using the AppDoman and setting the permission set.</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">AppDomain.CreateDomain( </span><span style="font-size:10.0pt;font-family:"Courier New";color:blue">string</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> friendlyName,<br>
Evidence
securityInfo,<br>
AppDomainSetup
info,<br>
PermissionSet
grantSet,<br>
</span><span style="font-size:10.0pt;font-family:"Courier New";color:blue">params</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> StrongName[]
fullTrustAssemblies);</span><span style="font-size:10.0pt"></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Is
there a way to do the same with my python scripts? </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">I
am running them using this:</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">ScriptEngine
engine = Python.CreateEngine();</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">ScriptSource
source = engine.CreateScriptSourceFromString(scriptAsString);</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">ScriptScope
scope = engine.CreateScope();</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">source.Execute(scope);</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt"> </span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Thanks
in advance.</span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt">Nicolas</span></p>
</div>
</div>
</div></div></div>
</div>
</div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.ironpython.com">Users@lists.ironpython.com</a><br>
<a href="http://lists.ironpython.com/listinfo.cgi/users-ironpython.com" target="_blank">http://lists.ironpython.com/listinfo.cgi/users-ironpython.com</a><br>
<br></blockquote></div><br></div>