Questions tagged [sandbox]

Sandbox is a security mechanism for containing untrusted programs. Such programs could contain malicious code, which would harm the user's system.

In computer security, a sandbox is a security mechanism for separating running programs. It is often used to execute untested code, or untrusted programs from unverified third parties, suppliers, untrusted users and untrusted websites.

Web Browsers such as and using varying sandboxing techniques, to protect the users from malicious code infecting the system.

Other common types of software which use sandboxing techniques are Virtualization software. Which allow a user to run programs within a confined environment, known as the Guest OS. The Guest OS is hosted on the Host OS, which is the main Operating System running on the system. Any harm or damages caused by any malicious programs hosted on the Guest OS, will be contained within thus not spreading to the Host OS. Thus allowing the user to resume his work without experiencing any setbacks.

Chat Room

Chat about sandbox with other Stack Overflow users

2327 questions
446
votes
22 answers

Can you run GUI applications in a Docker container?

How can you run GUI applications in a Docker container? Are there any images that set up vncserver or something so that you can - for example - add an extra speedbump sandbox around say Firefox?
Will
  • 68,898
  • 35
  • 156
  • 231
349
votes
1 answer

Is there a PHP Sandbox, something like JSFiddle is to JS?

Is there a PHP Sandbox, something like JSFiddle is to JS?
Jiew Meng
  • 74,635
  • 166
  • 442
  • 756
153
votes
15 answers

Is it possible to sandbox JavaScript running in the browser?

I'm wondering if it's possible to sandbox JavaScript running in the browser to prevent access to features that are normally available to JavaScript code running in an HTML page. For example, let's say I want to provide a JavaScript API for end users…
Walter Rumsby
  • 7,005
  • 5
  • 37
  • 36
128
votes
5 answers

Reading file contents on the client-side in javascript in various browsers

I'm attempting to provide a script-only solution for reading the contents of a file on a client machine through a browser. I have a solution that works with Firefox and Internet Explorer. It's not pretty, but I'm only trying things at the…
Damovisa
  • 18,263
  • 14
  • 62
  • 87
125
votes
6 answers

What is sandboxing?

I have read the Wikipedia article, but I am not really sure what it means, and how similar it is to version control. It would be helpful if somebody could explain in very simple terms what sandboxing is.
Lazer
  • 79,569
  • 109
  • 264
  • 349
113
votes
11 answers

Run an untrusted C program in a sandbox in Linux that prevents it from opening files, forking, etc.?

I was wondering if there exists a way to run an untrusted C program under a sandbox in Linux. Something that would prevent the program from opening files, or network connections, or forking, exec, etc? It would be a small program, a homework…
Frank
  • 15,722
  • 9
  • 28
  • 30
93
votes
7 answers

Sandbox against malicious code in a Java application

In a simulation server environment where users are allowed to submit their own code to be run by the server, it would clearly be advantageous for any user-submitted code to be run in side a sandbox, not unlike Applets are within a browser. I wanted…
Alan Krueger
  • 4,483
  • 4
  • 32
  • 47
91
votes
6 answers

iTunes account creation not allowed when trying to test In-App Purchases

I have an app in the App Store and I want to test in-app purchases. I followed the steps described on the Apple website but I'm facing some problems. When I try to log in in the iTunes in my application or in Settings/iTunes & App Stores, I receive…
Silviu
  • 1,197
  • 1
  • 8
  • 18
75
votes
7 answers

How can I create a secure Lua sandbox?

So Lua seems ideal for implementing secure "user scripts" inside my application. However, most examples of embedding lua seem to include loading all the standard libraries, including "io" and "package". So I can exclude those libs from my…
user150008
59
votes
5 answers

Looking for a practical approach to sandboxing .NET plugins

I am looking for a simple and secure way to access plugins from a .NET application. Although I imagine that this is a very common requirement, I am struggling to find anything that meets all my needs: The host application will discover and load its…
Tim Coulter
  • 8,323
  • 10
  • 60
  • 88
48
votes
7 answers

How do I create a Java sandbox?

I want to make my application to run other people's code, aka plugins. However, what options do I have to make this secure so they don't write malicious code. How do I control what they can or can not do? I have stumbled around that JVM has a "built…
corgrath
  • 10,383
  • 15
  • 56
  • 88
46
votes
5 answers

ScriptedSandbox64.exe has stopped working - Visual Studio 2015

This is the second time I've seen the error "Scripted Sandbox64.exe has stopped working" in Visual Studio 2015. In my particular case, I was building a Windows Forms application and you place the application into the system tray in Windows. This…
MacGyver
  • 16,700
  • 37
  • 145
  • 233
46
votes
5 answers

Safely sandbox and execute user submitted JavaScript?

I would like to have the ability to let users submit arbitrary JavaScript code, which is then sent to a Node.JS server and safely executed before the output is sent back to multiple clients (as JSON). The eval function comes to mind, but I know this…
Cory Gross
  • 35,372
  • 16
  • 60
  • 77
39
votes
13 answers

How to create a lightweight C code sandbox?

I'd like to build a C pre-processor / compiler that allows functions to be collected from local and online sources. ie: #fetch MP3FileBuilder http://scripts.com/MP3Builder.gz #fetch IpodDeviceReader http://apple.com/modules/MP3Builder.gz void…
SpliFF
  • 35,724
  • 15
  • 80
  • 113
38
votes
4 answers

How to disable Sandbox Mode for app in new Facebook Developer?

I can not see an option to disable that in the new Developers design!
Krasavchik
  • 389
  • 1
  • 3
  • 5
1
2 3
99 100