Question and proposal: Can D be used to compile and run untrusted plug-ins?

Adam D Ruppe destructionator at gmail.com
Sat Dec 4 13:53:43 UTC 2021


On Saturday, 4 December 2021 at 11:33:21 UTC, Moamen Abdelsattar 
wrote:
> I've recently known that D functions can be marked as `@safe`, 
> which makes all unsafe operations unallowed inside the function

You can also mark functions @trusted, which allows all operations 
inside but pretends to be safe from the outside.

So even if @safe worked for what you want, it is too easy to 
bypass to actually rely on it. Malicious users will just make all 
their naughty code as trusted.


More information about the Digitalmars-d mailing list