On Thu, Aug 2, 2012 at 4:17 PM, Leigh <[email protected]> wrote:
>> Sandboxing: Complicated by the fact that it only works in a threaded
>> build, can't transfer all types (e.g. resource, complex objects), and
>> can't run concurrently. Until/unless these problems can be
>> meaningfully solved, I wouldn't consider it a functional
>> implementation.
>
> To me the "thread thing" feels like the dirty hack workaround
> _because_ it's in PECL, and this is the only option available.
>
In all seriousness, I'd love to hear how you'd do Sandboxing without
using the tsrm context hack I used in runkit. That approach had
nothing to do with being in PECL, it had to do with that being the
only mechanism available to swap globals in and out at will.