Re:Redis Lua scripting implemented: how to play with it.
by almost on Tuesday May 03, 2011 @06:35AM
(#2509508)
You seem to be correct on both of those points.
Sandboxing Lua does seem quite easy though: http://stackoverflow.com/questions/1224708/how-can-i-create-...
Secondly, it does include filesystem access by default, and right now there is no decent protection against it. Hopefully, sandboxing will be implemented before this reaches anything related to stable.