Time  Nick       Message
10:37 sfan5      neat idea but also insecure because <string type>:sub can be modified
10:37 sfan5      (you can use env.string.sub)
10:49 sfan5      and you'll also want to use setfenv so the newly imported code actually runs entirely in the non-sandbox environment
12:58 MTDiscord  <savilli> Well, redis module also calls str:gsub where str is input. Can't do anything about it ig.
13:00 rubenwardy strnig table should be readonly and protected, with _metatable
13:03 sfan5      don't think that's possible
14:56 MTDiscord  <luatic> not possible without compromising performance and will also break mods that rely on extending it
14:57 MTDiscord  <luatic> being able to mark tables as readonly has been requested for a while on the lua mailing list it seems ;P
14:57 MTDiscord  <luatic> but currently the best "solution" available is a proxy object with a metatable, which turns out to be slow
14:58 MTDiscord  <luatic> savilli: I just tell my users prominently in the readme that they trust all enabled mods when trusting mine.
14:59 MTDiscord  <savilli> ofc there is a warning in the readme