❔ A safe scripting language for a Discord bot
Hi there. I'm looking into a system where server owners can design fully custom commands for their server without requiring their own bot, or the main bot to implement it. I've thought about perhaps utilizing Lua for this usecase, but I'm of course concerned about things like privilege escalation or finding a way out of the sandbox, resource exhaustion, and any other issues that would come with letting users effectively run their own code.
Are there any solutions out there that account for this? Lua isn't the only option obviously, I just know it's a common "I want to let users script things without them needing to know the same language the [x] is written in". Some things of note I'd be looking for:
- limiting execution steps or memory usage by the sandbox
- being able to pass in "context" to the sandbox (IE, the channel the custom command was run in, the user executing the command, etc)
Are there any solutions out there that account for this? Lua isn't the only option obviously, I just know it's a common "I want to let users script things without them needing to know the same language the [x] is written in". Some things of note I'd be looking for:
- limiting execution steps or memory usage by the sandbox
- being able to pass in "context" to the sandbox (IE, the channel the custom command was run in, the user executing the command, etc)
