{"action":"created","issue":{"url":"https://api.github.com/repos/lfex/try.lfe.io/issues/4","labels_url":"https://api.github.com/repos/lfex/try.lfe.io/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/lfex/try.lfe.io/issues/4/comments","events_url":"https://api.github.com/repos/lfex/try.lfe.io/issues/4/events","html_url":"https://github.com/lfex/try.lfe.io/issues/4","id":100789200,"number":4,"title":"Create blacklist","user":{"login":"oubiwann","id":894251,"avatar_url":"https://avatars.githubusercontent.com/u/894251?v=3","gravatar_id":"","url":"https://api.github.com/users/oubiwann","html_url":"https://github.com/oubiwann","followers_url":"https://api.github.com/users/oubiwann/followers","following_url":"https://api.github.com/users/oubiwann/following{/other_user}","gists_url":"https://api.github.com/users/oubiwann/gists{/gist_id}","starred_url":"https://api.github.com/users/oubiwann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oubiwann/subscriptions","organizations_url":"https://api.github.com/users/oubiwann/orgs","repos_url":"https://api.github.com/users/oubiwann/repos","events_url":"https://api.github.com/users/oubiwann/events{/privacy}","received_events_url":"https://api.github.com/users/oubiwann/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-08-13T14:46:30Z","updated_at":"2015-08-20T08:51:46Z","closed_at":null,"body":"Identify all the modules we will not be allowing and create a blacklist."},"comment":{"url":"https://api.github.com/repos/lfex/try.lfe.io/issues/comments/132942789","html_url":"https://github.com/lfex/try.lfe.io/issues/4#issuecomment-132942789","issue_url":"https://api.github.com/repos/lfex/try.lfe.io/issues/4","id":132942789,"user":{"login":"rvirding","id":11467,"avatar_url":"https://avatars.githubusercontent.com/u/11467?v=3","gravatar_id":"","url":"https://api.github.com/users/rvirding","html_url":"https://github.com/rvirding","followers_url":"https://api.github.com/users/rvirding/followers","following_url":"https://api.github.com/users/rvirding/following{/other_user}","gists_url":"https://api.github.com/users/rvirding/gists{/gist_id}","starred_url":"https://api.github.com/users/rvirding/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rvirding/subscriptions","organizations_url":"https://api.github.com/users/rvirding/orgs","repos_url":"https://api.github.com/users/rvirding/repos","events_url":"https://api.github.com/users/rvirding/events{/privacy}","received_events_url":"https://api.github.com/users/rvirding/received_events","type":"User","site_admin":false},"created_at":"2015-08-20T08:51:46Z","updated_at":"2015-08-20T08:51:46Z","body":"Ok, I am going to be very negative here.\r\n\r\nFirst off, as has been pointed out, you should do a whitelist not a blacklist. Second, this doesn't really help you anyway. To be really safe you would have to disallow all access to any library function which calls funs at any level, or allows you to do a metacall at any level. Any form of metacall. The problem is that once you hit compiled system code you have lost control. You would also have to disallow lambdas and apply, etc. You also have the problem of tuple module calls. ...\r\n\r\nRecently some one referenced an old mail which showed how easy it was to get past the restrictions.\r\n"}}