I'm not that familiar with Nashorn but the Truffle framework on which GraalJS is built has considerations for sandboxing. see: hostClassFilter() https://github

I'm not that familiar with Nashorn but the Truffle framework on which GraalJS is built has considerations for sandboxing. see: hostClassFilter() https://github.com/oracle/graal/blob/master/sdk/src/org.graalvm.polyglot/src/org/graalvm/polyglot/Context.java#L835 https://github.com/oracle/graal/blob/master/sdk/src/org.graa... I suspect that your use-case might be easier to port than most (if it comes to that) since you probably aren't using as many platform APIs. I agree that the volatility in java-land is new and unsettling and Nashorn is pretty young to be removed but the js ecosystem itself has been changing fast lately. I hope they keep Nashorn around even of they don't keep up with newer language versions.