Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there are a lot of classes that:
- commonly used in exploit chains because they have security flaws that Oracle refuse to fix (ScriptEngine)
- had numerous security problems recently and still quite a big unknown (java.lang.invoke.*)
- had security issues recently and in the past (java.util.concurrent.*, javax.xml.transform.Templates)
I'm interested in running stuff on appengine but if they are only using the SecurityManager then I think they have a huge problem with security.