A sandbox is a security mechanism for containing and restricting untrusted programs. Such programs could contain malicious code, which would otherwise harm the user's system.

learn more… | top users | synonyms

7
votes
3answers
340 views

Sandboxing untrusted user-supplied code in a web application

I am trying to create a programming game where user-supplied programs compete in battle simulations, to be used as a tool to teach and practice programming. (It will likely be a turn-based robot ...
6
votes
0answers
136 views

Vulnerability in popular Javascript Framework (Angularjs)

I found a bug that allows you to escape the AngularJS template sandbox. Angular is a mustache based template language. It allows you to put expressions that are evaluated in your html. For example, {{...
4
votes
0answers
43 views

The difference between jailing, sandboxing and interpretation

In my IT security classes I frequently ran over these terms and had a hard time distinguishing between them, so I tried to figure their differences: Sandboxing: Defense mechanism against mobile code, ...
3
votes
0answers
73 views

How to indicate that content in an iframe is untrusted

As part of a website I am developing, untrusted content is displayed in a sandboxed iframe. The content is loaded using the srcdoc attribute, but the iframe is sandboxed using sandbox="allow-scripts", ...
1
vote
0answers
72 views

What are the appropriate steps to take after installing a questionable Android app?

Situation: User installed an Android app from the Google Play Store. User's device is rooted, but that app does not have root privileges. XPrivacy reveals that the app is trying to make IPC (inter-...
1
vote
0answers
32 views

cuckoo sandbox - PID exit

I hope someone could help me I've played with cuckoo for a while however I've just done a new installation and it all works however it will not run the binary i would like to scan. the PID exits ...
0
votes
0answers
21 views

Auto-apply OS X sandbox profile to binary without the terminal sandbox-exec command

In OS X, is there a way to always apply a particular sandbox profile to a specified binary? The binary could for example be specified by its file system path and its fingerprint and/or its certificate....
0
votes
0answers
21 views

Is OS X sandbox able to provide access to fake layers (instead of denying access)?

Is there a way to trick sandboxed applications into thinking that they have more access than in reality? For example, present a fake network layer, a fake filesystem, or a fake address book, instead ...
0
votes
0answers
16 views

Sandboxing IE on metro interface

I hold a tablet with Windows 8.1. When I'm on the desktop interface I do use Sandboxie for normal internet usage to prevent having Windows infected. I wonder if there is a way to do the same with the ...
0
votes
0answers
129 views

Avast Sandbox Waking Computer from Sleep in Windows 10. Avast 2016 premium version

I typed in powercfg /lastwake into cmd and it told me an avast sandbox .exe had woken the computer. I've disabled sandbox and it no longer constantly wakes from sleep - within 30 seconds. I scanned it ...
0
votes
0answers
180 views

injecting javascript in webviews in Android

I am relatively new to mobile application security. Currently I am supposed to audit an android application which uses a webview to display some static FAQ page in an activity. The webview in ...