BuildBox

BuidBolx try apply security in execution your ruby code when unknown source.

Installation

Add this line to your application's Gemfile:

gem 'build_box'

And then execute:

$ bundle

Or install it yourself as:

$ gem install build_box

Set It Up

Remove all the bad methods and classes I can think of. But maybe you need more:

BuildBox.configure do |config|
  config.bad_constants << :Rails
  config.bad_constants << :ActiveRecord
  config.timeout = 3 # secconds, default: 3
  config.security_level = 0 # (0..3), default: 0
end

How To Use It

require 'build_box'

# good execution
result = nil
result = BuildBox.perform(' 1 + 2 ');
result.output # => 3
result.result # => 3
result.error? # => false
result.error # => nil

# bad execution
result = BuildBox.perform(' 1 + nil ');
result.output # => nil
result.error? # => true
result.error # => "exception message"

# execution should be failures
BuildBox.perform('`rm -rf /`').output # => "NameError: undefined local variable or method ``' for Kernel:Module"
BuildBox.perform('exec("rm -rf /")').output # => "NameError: undefined local variable or method `exec' for main:Object" 
BuildBox.perform('Kernel.exec("rm -rf /")').output # => "NameError: undefined local variable or method `exec' for Kernel:Module"BuildBox.perform(['require "open3"']).output # => ["NameError: undefined local variable or method `require' for main:Object"]

# Execution params
# BuildBox.perform(code, # => code to be performed
                   binding_context=TOPLEVEL_BINDING, # => binding variable context (like ERB)
                   security_level=BuildBox.config.security_level, # => $SAFE directive. permited (0..3)
                   timeout: 3 # => in seconds
                   )

BuildBox('1+2', self.__binding__, 3).result # => 3

# Hash Parameters
BuildBox(code:'1+2', binding_context: self.__binding__, security_level: 3).result # => 3

Contributing

1. Fork it ( http://github.com//build_box/fork )
2. Create your feature branch (git checkout -b my-new-feature)
3. Commit your changes (git commit -am 'Add some feature')
4. Push to the branch (git push origin my-new-feature)
5. Create new Pull Request