3 ms·

EDIT: removed my suggestion since it was unsafe. Thanks for pointing it out. I was hoping vm to offer you an isolated v8 interpreter without bindings that coul

EDIT: removed my suggestion since it was unsafe. Thanks for pointing it out. I was hoping vm to offer you an isolated v8 interpreter without bindings that could used as a sandbox, but this wasn't the case.

fransr 10y ago
The page explicitly says: "Note: The vm module is not a security mechanism. Do not use it to run untrusted code." https://nodejs.org/api/vm.html#vm_vm_executing_javascript https://nodejs.org/api/vm.html#vm_vm_executing_javascript
kevsim 10y ago
Though the docs pretty clearly state "Note: The vm module is not a security mechanism. Do not use it to run untrusted code."