3 ms·
Why not use Google Caja instead of a separate sandbox?
by cfvergara 10y ago
Why not use Google Caja instead of a separate sandbox?
- minitech 10y agoOverkill for what was never intended to be a sandbox for untrusted code. The “sandboxing”, like Django templates’, Jinja, Nunjucks, etc. is a well-intended measure to keep logic out of templates, but in practice only really gets in the way and causes mistaken assumptions about security.