Skip to content

Conversation

@MoisesGSalas
Copy link
Member

Usage of unsafely is determined by the setting
COURSES_WITH_UNSAFE_CODE in the edx-platform code, when True, the jailed code would skip the sandboxed environment and run directly on the service environment.

Allowing the use of unsafely through an HTTP call is an unnecesary vector.

@MoisesGSalas MoisesGSalas requested a review from a team as a code owner February 7, 2025 23:59
Usage of unsafely is determined by the setting
`COURSES_WITH_UNSAFE_CODE` in the edx-platform code, when True, the
jailed code would skip the sandboxed environment and run directly on the
service environment.

Allowing the use of unsafely through an HTTP call is an unnecesary
vector.
Copy link
Member

@felipemontoya felipemontoya left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR looks good. The instruction to ignore "unsafely" is in use by the edx-platform version of this since long.

@MoisesGSalas MoisesGSalas merged commit 70e0f1c into main Feb 11, 2025
4 checks passed
@MoisesGSalas MoisesGSalas deleted the mgs/remove-unsafely branch February 11, 2025 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants