From xemacs-m  Mon Feb 17 17:25:52 1997
Received: from CNRI.Reston.VA.US (CNRI.Reston.VA.US [132.151.1.1])
	by xemacs.org (8.8.5/8.8.5) with SMTP id RAA23966
	for <xemacs-beta@xemacs.org>; Mon, 17 Feb 1997 17:25:51 -0600 (CST)
Received: from newcnri.cnri.reston.va.us by CNRI.Reston.VA.US id aa19346;
          17 Feb 97 18:24 EST
Received: from anthem.CNRI.Reston.Va.US by newcnri.CNRI.Reston.Va.US (SMI-8.6/SMI-SVR4)
	id SAA21165; Mon, 17 Feb 1997 18:24:38 -0500
Received: by anthem.CNRI.Reston.Va.US (SMI-8.6/SMI-SVR4)
	id SAA05871; Mon, 17 Feb 1997 18:24:37 -0500
Date: Mon, 17 Feb 1997 18:24:37 -0500
Message-Id: <199702172324.SAA05871@anthem.CNRI.Reston.Va.US>
From: "Barry A. Warsaw" <bwarsaw@CNRI.Reston.VA.US>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: wmperry@aventail.com
Cc: xemacs-beta@xemacs.org
Subject: Re: Safe elisp functions?
References: <199702172311.PAA23394@newman>
Reply-To: "Barry A. Warsaw" <bwarsaw@CNRI.Reston.VA.US>
X-Attribution: BAW
X-Oblique-Strategy: The most important thing is the thing most easily forgotten
X-WWW-Homepage: http://www.python.org/~bwarsaw


>>>>> "WMP" == William M Perry <wmperry@aventail.com> writes:

    WMP> But, where do I draw the boundaries of the sandbox?  Right
    WMP> now, I allow access to:

What kind of architecture are you using to define and control the
sandbox?  Although the language mechanisms will be very different, you
might look at some of the ways we defined this for Grail.

BTW, do you (or will you) support Elisp applets using the OBJECT tag?
Now that would be kind of cool too... but moderately frightening! :-)

-Barry

