Re: PySchool.net, kickstarter campaign

2014-12-14 Thread Chris Angelico
On Mon, Dec 15, 2014 at 2:07 AM, Billy Earney billy.ear...@gmail.com wrote:
 Students can create, edit, load, save, and execute Python scripts directly
 in the browser.

Importantly, these scripts are actually executed in the client - they
are NOT being sent to the server for execution. That means there are
limitations on the language, to be sure, but none of the security
risks of letting untrusted users run Python code on the server.

ChrisA
-- 
https://mail.python.org/mailman/listinfo/python-list


Re: PySchool.net, kickstarter campaign

2014-12-14 Thread Billy Earney
ChrisA,

Yes, you are correct.  The scripts get compiled to javascript and then
executed in the browser.   Like you say, there are limitations, but most of
these focus around browser security issues,  and on the plus side, these
scripts do not get executed on the server side, so that helps reduce risk
there as well.

billy

On Sun, Dec 14, 2014 at 5:26 PM, Chris Angelico ros...@gmail.com wrote:

 On Mon, Dec 15, 2014 at 2:07 AM, Billy Earney billy.ear...@gmail.com
 wrote:
  Students can create, edit, load, save, and execute Python scripts
 directly
  in the browser.

 Importantly, these scripts are actually executed in the client - they
 are NOT being sent to the server for execution. That means there are
 limitations on the language, to be sure, but none of the security
 risks of letting untrusted users run Python code on the server.

 ChrisA
 --
 https://mail.python.org/mailman/listinfo/python-list

-- 
https://mail.python.org/mailman/listinfo/python-list


Re: PySchool.net, kickstarter campaign

2014-12-14 Thread Chris Angelico
On Mon, Dec 15, 2014 at 10:41 AM, Billy Earney billy.ear...@gmail.com wrote:
 Yes, you are correct.  The scripts get compiled to javascript and then
 executed in the browser.   Like you say, there are limitations, but most of
 these focus around browser security issues,  and on the plus side, these
 scripts do not get executed on the server side, so that helps reduce risk
 there as well.

Right. Every form of let the users type Python code in a web site and
see what it does will have limitations; most of them also have
security risks, but Brython specifically doesn't.

I tossed a few dollars into your KS campaign, BTW, but you're going to
need a *lot* more people than me :)

ChrisA
-- 
https://mail.python.org/mailman/listinfo/python-list


Re: PySchool.net, kickstarter campaign

2014-12-14 Thread Billy Earney
Thanks..  I appreciate your contribution!

On Sun, Dec 14, 2014 at 5:48 PM, Chris Angelico ros...@gmail.com wrote:

 On Mon, Dec 15, 2014 at 10:41 AM, Billy Earney billy.ear...@gmail.com
 wrote:
  Yes, you are correct.  The scripts get compiled to javascript and then
  executed in the browser.   Like you say, there are limitations, but most
 of
  these focus around browser security issues,  and on the plus side, these
  scripts do not get executed on the server side, so that helps reduce risk
  there as well.

 Right. Every form of let the users type Python code in a web site and
 see what it does will have limitations; most of them also have
 security risks, but Brython specifically doesn't.

 I tossed a few dollars into your KS campaign, BTW, but you're going to
 need a *lot* more people than me :)

 ChrisA
 --
 https://mail.python.org/mailman/listinfo/python-list

-- 
https://mail.python.org/mailman/listinfo/python-list