3 ms·
> With the advent of WASM, the mentioned sandbox is no more language specific. Which removes many of the advantages.
by ori_b 8y ago
> With the advent of WASM, the mentioned sandbox is no more language specific.
Which removes many of the advantages.
- MrEldritch 8y agoHow do you figure?
- skybrian 8y agoOne issue might be that Cloudflare won't have the source and can't recompile the code. But perhaps web assembly is easy enough to decompile?
- vnorilo 8y agowasm doesn't as of now have any means of code generation independent from the JS api. There is also no way to obfuscate call targets or corrupt heap outside the module's linear memory. Any sandbox breaking bugs that do not involve JS would be codegen errors, AFAICT; in that case what you need to analyze is just the wasm blob and its interaction with the codegen pipeline.