Implement a Sandbox mode

### Describe the project you are working on Godot ### Describe the problem or limitation you are having in your project It seems many users want to use Godot in a way where more complex content (such as scenes or Godot resources or even scripts) are downloaded from the internet. Unlike just sending simple variants, this is very insecure because the attack surface is huge. Just limiting the Godot API (or script) to not accessing files and similar things is far from ideal because the more code you can run the more you can workaround to exploit the engine, and Godot is not designed for security (except in some areas like networking and protocols), it is designed for performance. ### Describe the feature / enhancement and how it helps to overcome the problem or limitation A _real_ sandbox mode to run projects should be provided to users, to make sure security is as high as possible and attack surfaces are as limited as possible. ### Describe how your proposal will work, with code, pseudo-code, mock-ups, and/or diagrams The way this would work takes advantage of the Godot architecture. Basically, it would split Godot into two processes, similar to software like Chrome works, one that talks to the low-level OS and another that runs the game in a sandbox (and sends commands to the first) As such, this means that some of the core engine classes would effectively work as "proxies", like: * OS * DisplayServer * AudioDriver * RenderingDevice * FileAccess * DirAccess Meaning w

Posted by reduz on Jul 29, 2022, 2:17 PM

Tags

• github (SaaS)

Related issues

• 2026 - Microsoft Office 365
• [Ubuntu] `ubuntu-latest` label will use Ubuntu 26.04 in November 2026
• Gamut mapping
• [Codex Desktop] Editing and resending a queued message triggers "App-server queued follow-up no longer exists"
• [Windows] ChatGPT 26.820.60940 fails with "invalid transport in mcp_servers.codex_app"; Beta 26.727.40816 works
• [BUG]: infinite loading of videos