Isolated VM possible ?

[TerminalFi]

Looking at Tengo for a larger initiative but noticed that tengo scripts have direct access to the host if using OS or if implementing a http library. Is there a native capability to isolate tengo code completely ?

[geseq]

You can choose to not include the libraries that provide access to host. Something like

	s := script.New([]byte(code))
	s.SetImports(stdlib.GetModuleMap("math", "text", "times", "json", "enum"))

	c, err := s.Compile()
	if err != nil {
		return result, err
	}

	if err = c.Run(); err != nil {
		return result, err
	}

[TerminalFi]

You can choose to not include the libraries that provide access to host. Something like

	s := script.New([]byte(code))

	s.SetImports(stdlib.GetModuleMap("math", "text", "times", "json", "enum"))



	c, err := s.Compile()

	if err != nil {

		return result, err

	}



	if err = c.Run(); err != nil {

		return result, err

	}

So no is the right answer, I know I don't have to include those modules. That wasn't what I was asking