endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES
Apache License 2.0
829 stars 72 forks source link

Establish Hardened JavaScript (ses) support for vetted shims by September, 2023 #1818

Closed aj-agoric closed 1 year ago

aj-agoric commented 1 year ago

What is the Problem Being Solved?

In support of the MetaMask Grant Process, we aim to support establishing hardened JavaScript (ses)

Description of the Design

Hardened JavaScript: a shim for hardened JavaScript, suitable for making a realm suitable for object capability programming and multi-tenant realms. “Vetted shims”: Allow other shims to run after SES modifies the language and when it hardens the language, so they can extend the shared intrinsics. Improve diagnostics for debugging, to potentially include improvements to the transparency of error stacks.

Security Considerations

Scaling Considerations

Test Plan

Upgrade Considerations

kriskowal commented 1 year ago

Completed #422