Re: Finalizers and Lua.org demo page

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]

Subject: Re: Finalizers and Lua.org demo page
From: Egor Skriptunoff <egor.skriptunoff@...>
Date: 2017年7月26日 22:09:39 +0300

On Wed, Jul 26, 2017 at 8:08 PM, Mikhail Zajcev <zajcev.m@yandex.ru> wrote:

Egor wrote:

> 1) I still can access one of original tables: getmetatable("")

Fixed this.

> 2) _ENV._G == _ENV, it is a "first-level circular references", so _G will not be available?

Manually added env._G (which is == env)

http://codepad.org/6OIg8kqK

I still can access original _G with this trick:

local original_G = load("return _G")()

You should redefine "load()" somehow to hide original _G from untrusted code

Follow-Ups:
- Re: Finalizers and Lua.org demo page, Luiz Henrique de Figueiredo
- Re: Finalizers and Lua.org demo page, Mikhail Zaycev

References:
- Finalizers and Lua.org demo page, Egor Skriptunoff
- Re: Finalizers and Lua.org demo page, Luiz Henrique de Figueiredo
- Re: Finalizers and Lua.org demo page, Luiz Henrique de Figueiredo
- Re: Finalizers and Lua.org demo page, Luiz Henrique de Figueiredo
- Re: Finalizers and Lua.org demo page, Luiz Henrique de Figueiredo
- Re: Finalizers and Lua.org demo page, Egor Skriptunoff
- Re: Finalizers and Lua.org demo page, Mikhail Zajcev
- Re: Finalizers and Lua.org demo page, Egor Skriptunoff
- Re: Finalizers and Lua.org demo page, Mikhail Zajcev
- Re: Finalizers and Lua.org demo page, Egor Skriptunoff
- Re: Finalizers and Lua.org demo page, Mikhail Zajcev
- Re: Finalizers and Lua.org demo page, Egor Skriptunoff
- Re: Finalizers and Lua.org demo page, Mikhail Zajcev

Prev by Date: Re: Fengari: Why we rewrote Lua in JS
Next by Date: Re: Finalizers and Lua.org demo page
Previous by thread: Re: Finalizers and Lua.org demo page
Next by thread: Re: Finalizers and Lua.org demo page
Index(es):
- Date
- Thread