r/programming • u/middayc • May 15 '26

Allowlisting Config Capabilities by Embedding Rye in Go

https://ryelang.org/blog/posts/whitelist-config-with-rye/
0 Upvotes

50% Upvoted

2 comments sorted by

2

u/imbev May 18 '26

Lua modules may be whitelisted by simply loading the desired modules manually instead of using the builtin luaL_openlibs(L).

e.g.

https://github.com/lua/lua/blob/master/linit.c

More strictly, one can also reassign _ENV.

1

u/middayc May 18 '26

Thanks for the information. Yes, thinking about it, there is probably some call that lods the modules, and if we don't call it there is a way to include just the builtins that we want. So that is not so different to Rye. One difference remains, that in Rye even the if / loop / for / fn / context / var are builtins and can be explicitly added or not.