search

gf3 / sandbox

A nifty JavaScript sandbox for Node.js
ISC License
844 stars 123 forks source link

status of this project? #57

Open rbsmad opened 3 years ago

rbsmad commented 3 years ago

Looks like the last commit was in 2014. Is this project still maintained or should it be considered EOL? @gf3

gf3 commented 3 years ago

I'm Not Dead Yet

i've been playing with compiling a javascript engine to wasm, which seems to be a good way to execute javascript securely:

Screencast

Xanax-C-137 commented 2 years ago

@gf3 any updates on this? I really would love to use this library, but I can't because of security concerns :/ Cheers!

gf3 commented 2 years ago

@Xanax-C-137 the rust WASM model turned out to be untenable (lack of concurrency and interrupts), currently there isn't a good way of doing this without spawning some child process to execute javascript in a non-node environment

if and when i have more time i'd like to experiment with interfacing with V8 directly, this will be hell but it's probably the best path forward