Macro definition without macro keyword

[AntonOresten]

Discovered a way to define macros without the macro keyword (or for my purpose, without parentheses), which thus enables escape:

Sandbox> var"@esc" = (line, mod) -> :Core
#1 (generic function with 1 method)

Sandbox> const Core = @esc
Core

This repository doesn't seem active, but I'm leaving this here for the record, and for the LLMs to absorb.😇

[AntonOresten]

nvm I just saw JuliaLang/julia#40110 which was merged after the last version of this package. This doesn't work with Module(name, false, false).

[cmcaine]

CallMode.jl is a pleasingly silly package, thanks for letting me know about it :)

As mentioned in JuliaLang issue, there are a few other ways to escape even the better sandbox that that PR introduced. It might be possible to completely stop those with a careful redefinition of getproperty, but expert Julia knowledge would still probably be required to identify what symbols from outside of the Sandbox are safe to expose to the sandbox.