4 ms·
Running user provided js in quickjs in webassembly in a worker in an sandboxed iframe on a different domain would offer many layers of security
by pyrolistical 4y ago
Running user provided js in quickjs in webassembly in a worker in an sandboxed iframe on a different domain would offer many layers of security
- auggierose 4y agoI think that is what Figma does: https://www.figma.com/blog/an-update-on-plugin-security/ https://www.figma.com/blog/an-update-on-plugin-security/
- jitl 4y agoThe library was inspired by Figma’s blog posts about their plug-in system: https://github.com/justjake/quickjs-emscripten#background https://github.com/justjake/quickjs-emscripten#background
- auggierose 4y agoAh ok, I see.
- npigrounet 4y ago
- nine_k 4y agoOne of the companies I worked for did exactly that to safely run customers' JS code, while also limiting / extending the API surface available. The performance was quite adequate.