Try out WebOOT page

[cdeil]

I'll try to set up WebOOT at mac-ci.mooo.com with some example files so that people can try it out. There's nothing important on that machine, so not a big deal should it be hacked.

@ndawe Do you think it's possible to forward e.g. rootpy.org/try/weboot to there, so that we have a nicer, more long-term URL to refer to?

[pwaller]

This is a nice idea, but I am quite weary about putting this on the public internet without some sort of sandboxing/control.

[cdeil]

Do you have a suggestion on how to run it in a controlled machine?

Would a Linux Virtualbox on mac-ci.mooo.com be better?
I guess it would be a bit harder to set up, but should be doable ..

[pwaller]

A virtual machine would be one way to go, certainly. But I would start with the assumption that WebOOT is trivial to compromise and it wouldn't be obvious when it is.

[cdeil]

But would there be any hard if the VM is compromised?
(Could it be used for spamming?)

[pwaller]

Yes, it could be used for bad things, in general. I don't know a straightforward solution at the moment.