if not net then net = {} end

net.allow_unsafe_api = {  -- this defines the secure zones where net.dostring_in() can be called from
  "userhooks",
  "scripting",
  "gui",
}

net.allow_dostring_in = { -- and this defines the zones that should be addressed from net.dostring_in()
  "mission",
  "scripting",
  "gui",
  "export",
  "config",
}