> That will transpile a restricted javascript (or whatever) into a runtime that just doesn't do these things? They already invented that: https://github.com/go

> That will transpile a restricted javascript (or whatever) into a runtime that just doesn't do these things? They already invented that: https://github.com/google/caja https://github.com/google/caja "Caja uses an object-capability security model to allow for a wide range of flexible security policies, so that your website can effectively control what embedded third party code can do with user data."