Deno Subhosting: the easiest and most secure way to run untrusted multi-tenant code
Deno Subhosting: the easiest and most secure way to run untrusted multi-tenant code Today, we’re excited to launch a self-serve version of Deno Subhosting – a platform that enables companies to securely run untrusted JavaScript code written by their users. Getting to this point was a long journey that began almost two years ago with a partnership to power Netlify’s edge functions product. Since th
GitHub - endojs/Jessie: Tiny subset of JavaScript for ocap-safe universal mobile code
This document is an early draft. Comments appreciated! Thanks. Today, JavaScript is the pervasive representation for (somewhat) safe mobile code. For another representation to achieve universality quickly, it must be a subset of JavaScript, and so runs at least everywhere JavaScript runs. Whereas JSON is a simple universal representation for safe mobile data, Jessie is a simple universal represent
Sandboxing and Workload Isolation
Sandboxing and Workload Isolation Author Name Thomas Ptacek @tqbf @tqbf Workload isolation makes it harder for a vulnerability in one service to compromise every other part of the platform. It has a long history going back to 1990s qmail, and we generally agree that it’s a good, useful thing. Despite a plethora of isolation options, in the time I spent consulting for technology companies I learned
GitHub - justjake/quickjs-emscripten: Safely execute untrusted Javascript in your Javascript, and execute synchronous code that uses async functions
Javascript/Typescript bindings for QuickJS, a modern Javascript interpreter, compiled to WebAssembly. Safely evaluate untrusted Javascript (supports most of ES2023). Create and manipulate values inside the QuickJS runtime (more). Expose host functions to the QuickJS runtime (more). Execute synchronous code that uses asynchronous functions, with asyncify. Github | NPM | API Documentation | Variants
Announcing Sandpack 2.0 and a Node.js runtime for any browser - CodeSandbox
Today, we are announcing Sandpack 2.0, which introduces Nodebox—a fast Node.js runtime that allows you to run server-side code in any browser. One year ago, we introduced Sandpack, an open-source in-browser bundler that allows you to run live running code examples on your website. We couldn’t have made a better decision. We knew how powerful Sandpack is (it's the bundler that powers CodeSandbox it
今Partytownがヤバい。JavaScript Sandboxの未来はどっちだ？
概要 Partytownというプロジェクトが先月発表された。このプロジェクト自体はWebのパフォーマンス向上(3rd Party Scriptによるブロッキングの低減)を主目的としているが、実質ブラウザにおけるJavaScript Sandboxの方向性に一石を投じるものであるとして自分は理解した。本稿ではこちらについて背景とともに解説を試みる。 WebブラウザにおけるJavaScript Sandbox JavaScriptで記述されたWebアプリケーションにおいて、たとえばプラグイン機構を実現したいなど、他Partyが提供あるいはユーザ自身が記述したスクリプトを、ホストとなるアプリケーションに影響を与えることなく実行することを許可したい、というケースはままある。2000年代に跋扈したブログパーツの類はWebコンテンツに対するプラグインの代表例とも言えるが、埋め込み先ページに対しての全権
GitHub - endojs/endo: Endo is a distributed secure JavaScript sandbox, based on SES
Endo is a JavaScript platform under development for secure communication among objects within one process and distributed between mutually suspicious machines. The foundation of Endo is Hardened JavaScript as implemented by ses, a tamper-proof JavaScript environment that allows safe execution of arbitrary programs in Compartments. Most JavaScript libraries built for Node.js, either in CommonJS or
An update on plugin security | Figma Blog
We're excited to introduce plugins to the entire Figma community. Today, the gates are open for anyone to use plugins built by our community and build your own plugins tailored to your workflow. know, we did a lot of research to figure out how to safely run 3rd-party code on figma.com. We eventually settled on a technology called the Realms shim to do this. A little over two weeks ago, several ind
GitHub - felixge/node-sandboxed-module: A sandboxed node.js module loader that lets you inject dependencies into your modules.
What to do with this This module is intended to ease dependency injection for unit testing. However, feel free to use it for whatever crimes you can think of. API SandboxedModule.load(moduleId, [options]) Returns a new SandboxedModule where moduleId is a regular module path / id as you would normally pass into require(). The new module will be loaded in its own v8 context, but otherwise have acces
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
endo/packages/ses at master · endojs/endo
GitHub - tildeio/oasis.js: A lightweight library for embedding untrusted content and exposing capabilities. I guess it does two things? But it does them well.
CodeSandbox: Instant Cloud-Based IDE
GitHub - patriksimek/vm2: Advanced vm/sandbox for Node.js