3 ms·
Isn't it the same with JavaScript?
by cdancette 9y ago
Isn't it the same with JavaScript?
- chungy 9y agoYes, and WebAssembly runs on top of the existing JavaScript VM engines.
- Thaxll 9y agoI don't think it runs on the same V8 ( chrome ) that the one runs JS, I remember 2 engines running.
- DiThi 9y agoThe wasm binary itself may be using a separate engine, but heavily sandboxed: it can only communicate with JS, and nothing else. The (newly added) attack surface is minimal when compared with Flash, Java, etc (each with its own APIs). Almost any flaw must be in the JS side, and that's already battle-proven for years. ActiveX didn't even have a sandbox, so not even related.
- chungy 9y agoThe attack surface with classic NPAPI plugins (Flash, Java, etc) is practically unlimited. It was up to the likes of Flash and Java to secure themselves, not the browser. Various random plugins from other sources (eg, the QuakeLive and Unity plugins) may as well have cared about security _even less_ than the already abysmal track record of Flash and Java.