We have prepared some examples to help you implement your first Sandboxed API library.
You can find them in //sandboxed_api/examples, see below for detailed explanations.
- The sandbox definition can be found in the sandbox.h file.
- The (automatically generated) function annotation file (a file providing prototypes of sandboxed functions) can be found in
bazel-out/genfiles/sandboxed_api/examples/sum/lib/sum-sapi.sapi.hafter a Bazel build.
- The actual execution logic (a.k.a. Host Code) which makes use of the exported sandboxed procedures can be found in main_sum.cc.
This is a demo implementation (functional, but currently not used in production) for the zlib library, exporting some of its functions and making them available to the Host Code.
The demonstrated functionality of the Host Code is decoding of zlib streams from stdin to stdout.
This SAPI library doesn't use the
sandbox.h file, as it uses the default Sandbox2 policy, and an embedded SAPI library, so there is no need to provide the
sapi::Sandbox::GetLibPath() or the
The Host Code doesn't represent a “normal”program, instead it demonstrates the functionality of the SAPI library using unit tests.
In this example, the non-protobuf based functions are also included to provide a comparison between the two approaches.