The untrusted-python from healeycodes

untrusted-python's Introduction

📦 untrusted-python

My blog post: Running Untrusted Python Code

This is a sandbox for running untrusted Python code. Until it's been audited by someone with some kind of security authority, you should consider it to be insecure.

With that in mind, I welcome any bug reports, sandbox escapes, etc. – please raise an issue or email/DM me.

You can try and break out of it here: https://untrusted-python.vercel.app

Development

Fly.io backend

Install flyctl.

cd sandbox
fly launch

Follow the instructions in your terminal. Make a note of the URL – it will look like https://foo.fly.dev. Copy it (without a trailing slash), and add it to web/.env as API.

Next.js frontend

npm i
npm run dev

Follow the instructions in your terminal.

Deploy

web is a Next.js app that you can deploy to Vercel. Set the root directory of the project to web.

sandbox is a Fly.io app that has fly.toml file ready to use. Add the Fly.io URL as a Vercel environment variable as API (without a trailing slash).

untrusted-python's People

Contributors

Stargazers

Watchers

untrusted-python's Issues

Couldn't import some standard Python libs because of the permission issue

Hi @healeycodes , firstly I'd like to say thanks for the great idea and making it work. But it there seems to be an issue what we can't import several standard libraries. For example:

└─> curl -X POST https://untrusted-python.fly.dev/api/exec \
-H "Content-Type: application/json" \
-d '{"code":"import datetime"}'

Traceback (most recent call last):
  File "/app/./sandbox.py", line 41, in <module>
  File "<string>", line 1, in <module>
ModuleNotFoundError: No module named 'datetime'

After checking around I can see the issue is because some permissions are missing. After disabled the drop_perms() function, it works well. Like this:

if __name__ == "__main__":
    code = sys.argv[1]
    set_mem_limit()
    # drop_perms()
    exec(code)

Then it works:

└─> curl -X POST http://localhost:3000/api/exec \
-H "Content-Type: application/json" \
-d '{"code":"import datetime\nprint(1)"}'
1

So ideally we should improve this function to let all default Python's functionality work well.

Recommend Projects

healeycodes / untrusted-python Goto Github PK

untrusted-python's Introduction

📦 untrusted-python

Development

Fly.io backend

Next.js frontend

Deploy

untrusted-python's People

Contributors

Stargazers

Watchers

Forkers

untrusted-python's Issues

Couldn't import some standard Python libs because of the permission issue

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent