Class: Sandbox::Safe

Inherits:
Full
  • Object
show all
Defined in:
lib/sandbox.rb

Constant Summary collapse

IO_S_METHODS = 
%w[
  new
  foreach
  open
]
KERNEL_S_METHODS = 
%w[
  Array
  binding
  block_given?
  catch
  chomp
  chomp!
  chop
  chop!
  eval
  fail
  Float
  format
  global_variables
  gsub
  gsub!
  Integer
  iterator?
  lambda
  local_variables
  loop
  method_missing
  proc
  raise
  scan
  split
  sprintf
  String
  sub
  sub!
  throw
].freeze
SYMBOL_S_METHODS = 
%w[
  all_symbols
].freeze
STRING_S_METHODS = 
%w[
  new
].freeze
KERNEL_METHODS = 
%w[
  ==
  ===
  =~
  Array
  binding
  block_given?
  catch
  chomp
  chomp!
  chop
  chop!
  class
  clone
  dup
  eql?
  equal?
  eval
  fail
  Float
  format
  freeze
  frozen?
  global_variables
  gsub
  gsub!
  hash
  id
  initialize_copy
  inspect
  instance_eval
  instance_of?
  instance_variables
  instance_variable_get
  instance_variable_set
  instance_variable_defined?
  Integer
  is_a?
  iterator?
  kind_of?
  lambda
  local_variables
  loop
  methods
  method_missing
  nil?
  private_methods
  print
  proc
  protected_methods
  public_methods
  raise
  remove_instance_variable
  respond_to?
  respond_to_missing?
  scan
  send
  singleton_methods
  singleton_method_added
  singleton_method_removed
  singleton_method_undefined
  split
  sprintf
  String
  sub
  sub!
  taint
  tainted?
  throw
  to_a
  to_s
  type
  untaint
  __send__
].freeze
NILCLASS_METHODS = 
%w[
  &
  inspect
  nil?
  to_a
  to_f
  to_i
  to_s
  ^
  |
].freeze
SYMBOL_METHODS = 
%w[
  ===
  id2name
  inspect
  to_i
  to_int
  to_s
  to_sym
].freeze
TRUECLASS_METHODS = 
%w[
  &
  to_s
  ^
  |
].freeze
FALSECLASS_METHODS = 
%w[
  &
  to_s
  ^
  |
].freeze
ENUMERABLE_METHODS = 
%w[
  all?
  any?
  collect
  detect
  each_with_index
  entries
  find
  find_all
  grep
  include?
  inject
  map
  max
  member?
  min
  partition
  reject
  select
  sort
  sort_by
  to_a
  zip
].freeze
STRING_METHODS = 
%w[
  %
  *
  +
  <<
  <=>
  ==
  =~
  capitalize
  capitalize!
  casecmp
  center
  chomp
  chomp!
  chop
  chop!
  concat
  count
  crypt
  delete
  delete!
  downcase
  downcase!
  dump
  each
  each_byte
  each_line
  empty?
  eql?
  gsub
  gsub!
  hash
  hex
  include?
  index
  initialize
  initialize_copy
  insert
  inspect
  intern
  length
  ljust
  lines
  lstrip
  lstrip!
  match
  next
  next!
  oct
  replace
  reverse
  reverse!
  rindex
  rjust
  rstrip
  rstrip!
  scan
  size
  slice
  slice!
  split
  squeeze
  squeeze!
  strip
  strip!
  start_with?
  sub
  sub!
  succ
  succ!
  sum
  swapcase
  swapcase!
  to_f
  to_i
  to_s
  to_str
  to_sym
  tr
  tr!
  tr_s
  tr_s!
  upcase
  upcase!
  upto
  []
  []=
].freeze

Instance Method Summary collapse

Instance Method Details

#activate! ⇒ Object 



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
 
# File 'lib/sandbox.rb', line 20

def activate!
  activate_fakefs

  keep_singleton_methods(:Kernel, KERNEL_S_METHODS)
  keep_singleton_methods(:Symbol, SYMBOL_S_METHODS)
  keep_singleton_methods(:String, STRING_S_METHODS)
  keep_singleton_methods(:IO, IO_S_METHODS)

  keep_methods(:Kernel, KERNEL_METHODS)
  keep_methods(:NilClass, NILCLASS_METHODS)
  keep_methods(:Symbol, SYMBOL_METHODS)
  keep_methods(:TrueClass, TRUECLASS_METHODS)
  keep_methods(:FalseClass, FALSECLASS_METHODS)
  keep_methods(:Enumerable, ENUMERABLE_METHODS)
  keep_methods(:String, STRING_METHODS)
end

#activate_fakefs ⇒ Object 



37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
 
# File 'lib/sandbox.rb', line 37

def activate_fakefs
  require 'fileutils'

  # unfortunately, the authors of FakeFS used `extend self` in FileUtils, instead of `module_function`.
  # I fixed it for them
  (FakeFS::FileUtils.methods - Module.methods - Kernel.methods).each do |module_method_name|
    FakeFS::FileUtils.send(:module_function, module_method_name)
  end

  import  FakeFS
  ref     FakeFS::Dir
  ref     FakeFS::File
  ref     FakeFS::FileTest
  import  FakeFS::FileUtils #import FileUtils because it is a module

  eval <<-RUBY
    Object.class_eval do
      remove_const(:Dir)
      remove_const(:File)
      remove_const(:FileTest)
      remove_const(:FileUtils)

      const_set(:Dir,       FakeFS::Dir)
      const_set(:File,      FakeFS::File)
      const_set(:FileUtils, FakeFS::FileUtils)
      const_set(:FileTest,  FakeFS::FileTest)

      [Dir, File, FileUtils, FileTest].each do |fake_class|
        fake_class.class_eval do
          def self.class_eval 
            raise NoMethodError, "class_eval is unavailable"
          end
          def self.instance_eval 
            raise NoMethodError, "instance_eval is unavailable"
          end
        end
      end
    end
  RUBY

  FakeFS::FileSystem.clear
end

#eval_with_timeout(code, timeout = 10) ⇒ Object 



80
81
82
83
84
85
86
87
88
89
90
 
# File 'lib/sandbox.rb', line 80

def eval_with_timeout(code, timeout=10)
  require 'timeout'

  timeout_code = <<-RUBY
    Timeout.timeout(#{timeout}) do
      #{code}
    end
  RUBY

  eval timeout_code
end