3 ms·

How do you figure?

• skybrian 8y ago
  One issue might be that Cloudflare won't have the source and can't recompile the code. But perhaps web assembly is easy enough to decompile?
  • vnorilo 8y ago
    wasm doesn't as of now have any means of code generation independent from the JS api. There is also no way to obfuscate call targets or corrupt heap outside the module's linear memory. Any sandbox breaking bugs that do not involve JS would be codegen errors, AFAICT; in that case what you need to analyze is just the wasm blob and its interaction with the codegen pipeline.