3 ms·
It is a lot better: there is a sandbox with minimal surface area compared to no sandbox at all (except for memory isolation)
by afiori 5y ago
It is a lot better: there is a sandbox with minimal surface area compared to no sandbox at all (except for memory isolation)
- pjmlp 5y agoWhen they are finished with the WebAssembly roadmap there will be the same sandbox as a typical OS process, no different of running a ART executable on Android, bitcode on watchOS, MSIL on Windows, or TIMI on IBM i.
- afiori 5y agoOf course, that is the plan, but even then it will still be possible to run WebAssebly modules with no permissions or limited permissions, as the sandbox was always there. On the other hand I need to admit that I would have not forseen some of the more recent use cases for WebAssembly https://bytecodealliance.org/articles/making-javascript-run-fast-on-webassembly https://bytecodealliance.org/articles/making-javascript-run-... which can be reminescent of the "docker daemon running as root" issue.