Consider looking into QuickJS (https://bellard.org/quickjs/ https://bellard.org/quickjs/) instead which has more impressive standards support than Duktape. Fig

Consider looking into QuickJS (https://bellard.org/quickjs/ https://bellard.org/quickjs/) instead which has more impressive standards support than Duktape. Figma has a series of blog posts on sandboxing Javascript in the browser for their plugins API: https://www.figma.com/blog/how-we-built-the-figma-plugin-system/ https://www.figma.com/blog/how-we-built-the-figma-plugin-sys... https://www.figma.com/blog/an-update-on-plugin-security/ https://www.figma.com/blog/an-update-on-plugin-security/ tl;dr they use QuickJS via WebAssembly at the moment.