search

gf3 / sandbox

A nifty JavaScript sandbox for Node.js
ISC License
843 stars 123 forks source link

Babel #56

Open jstettner opened 6 years ago

jstettner commented 6 years ago

Would it be safe to use babel to transform untrusted code before using the sandbox, or is would that open up opportunity for an attack?

lbfalvy commented 2 years ago

I can't see why not, Babel doesn't execute code and its plugins interact with it in a clean AST form. The probability of abuse is negligible.