Centralize Lua sandboxing

2 files changed, 10 insertions, 0 deletions

diff --git a/libs/lua/lua/luastate.h b/libs/lua/lua/luastate.h
index 5a5c939c2a..cdc7f2b2bf 100644
--- a/libs/lua/lua/luastate.h
+++ b/libs/lua/lua/luastate.h
@@ -36,6 +36,7 @@ public:
 	void collect_garbage ();
 	void collect_garbage_step ();
 	void tweak_rt_gc ();
+	void sandbox (bool rt_safe = false);
 
 	sigc::signal<void,std::string> Print;
 
diff --git a/libs/lua/luastate.cc b/libs/lua/luastate.cc
index 8b704fbe6a..80ce41944c 100644
--- a/libs/lua/luastate.cc
+++ b/libs/lua/luastate.cc
@@ -89,6 +89,15 @@ LuaState::tweak_rt_gc () {
 }
 
 void
+LuaState::sandbox (bool rt_safe) {
+	do_command ("loadfile = nil dofile = nil require = nil dofile = nil package = nil debug = nil os.exit = nil os.setlocale = nil rawget = nil rawset = nil coroutine = nil module = nil");
+	if (rt_safe) {
+		do_command ("os = nil io = nil");
+	}
+}
+
+
+void
 LuaState::print (std::string text) {
 	Print (text); /* EMIT SIGNAL */
 }