Malicious use of snippets

[d.healey]

It occurred to me that since we can run terminal commands from HISE it would be quite easy to send someone a snippet that as soon as they loaded it would do nasty things to their system (intentionally or otherwise).

I'm sure it would be reported quite quickly but that wouldn't help the first victim very much. Is there anything we can do to protect against this?

For example this will delete the user's home folder.

const rm = FileSystem.fromAbsolutePath("/usr/bin/rm");
rm.startAsProcess("rf ~/");

[aaronventure]

@d-healey delet dis nephew

On a serious note: it's a good point. Probably needs a snipper preprocessor which will execute the scripts, check if any startAsProcess calls were made or FileSystem deletion was used and warn the user about it or load it in the same window like the snippet browser with the ability to display the offensive lines.

Just checking the script for text wouldn't be enough as you can easily encode a blowfish string and hide it into an eval call.