sandbox-libs

Documentation

Overview

Example sandbox-libs shows controlling which Lua standard libraries a script can reach via Config.Libs. The default set (base/table/string/math/utf8/ coroutine) omits os/io/package/debug and removes load/loadfile/dofile, so an untrusted script cannot touch the host or run arbitrary code. Opting a library in (here os) is explicit and per-Runtime.