22 ms·
The main thing I want from Deno is per dependency sandboxing. They let you enable file system or internet access for the whole project, but that's basically use
by ralusek 4y ago
The main thing I want from Deno is per dependency sandboxing. They let you enable file system or internet access for the whole project, but that's basically useless in most of my usecases. If I could whitelist the couple of dependencies that might need http access or whatever, that'd be great.
- laurencerowe 4y agoWhile there's no realistic way to provide a security boundary between JavaScript modules, Workers are a possibility [1]. The code with the more restricted set of permissions must run in the Worker. That code then communicates with the rest of your app through postMessage / SharedArrayBuffer, perhaps using ComLink [2]. [1] https://deno.land/manual@v1.25.0/runtime/workers#specifying-worker-permissions https://deno.land/manual@v1.25.0/runtime/workers#specifying-... [2] https://github.com/GoogleChromeLabs/comlink https://github.com/GoogleChromeLabs/comlink
- hayd 4y agoI think realms are the future in this direction. https://github.com/denoland/deno/issues/13239 https://github.com/denoland/deno/issues/13239