* Keisial <keisial(a)gmail.com> [Sun, 25 Dec 2011 23:16:46 +0100]:
On 23.12.2011 18:21, Dmitriy Sintsov wrote:
> I remember that PHP had some outdated and unmaintained sandboxing
PECL
module,
however it's unmaintained for a long time.
http://php.net/manual/en/runkit.sandbox.php
Dmitriy
Dmitry Zenovich applied for maintaining it last year, although little
seems to have been done in the official repo. He seems to have been
working on
https://github.com/zenovich/runkit/
I worked with runkit some years ago and it wasn't hard to make it run.
The downside is that you need a threaded php.
Wikimedia has experienced PHP/C developers who probably can maintain and
update such module. Maybe even cross-translation from subset of JS into
PHP (with caching) then executing via runkit could be possible. But
threading is not something that is desirable in current environment. So
maybe it was a bad idea.
Dmitriy