3 ms·

> Even today, we still don't really have this -- you can't stick JavaScript (or a Java applet) in an email and expect the receiver to be able to run it. We did

> Even today, we still don't really have this -- you can't stick JavaScript (or a Java applet) in an email and expect the receiver to be able to run it. We did have it -- it was called VBScript in Outlook and it was one of the biggest (actually probably the biggest) security disasters in the history of the internet.

blacksqr 11y ago
And Tcl has had a safe interpreter feature and a sophisticated policy mechanism from early on. It was used in the Tcl browser plugin, which routinely downloaded code from the Web and executed it. The plugin is gone but the safe interpreter and policy interface are still perfectly functional. Tcl also had several agent extensions back in the 1990's.