On 3/3/2012 8:20 PM, H. S. Teoh wrote:
Don't know how this would work on Windows, but presumably there are clean ways of doing it that doesn't endanger the health of the process creating the sandbox.
If you're dealing with plugins from an unknown source, it's a good design to separate plugins and such as entirely separate processes. Then, when one goes down, it cannot bring down anyone else, since there is no shared address space.
They can communicate with the OS-supplied interprocess communications API.
