> Run your code in a WASM sandbox Assuming your WASM sandbox is airtight, that would work. But there are still ways to break out or cause damage because within

> Run your code in a WASM sandbox Assuming your WASM sandbox is airtight, that would work. But there are still ways to break out or cause damage because within the sandbox, its like a flat address space with 0 modern protections like ASLR, stack canaries, page protection, etc. (unless you manually compile it in yourself). See [0] * [0]: https://www.usenix.org/conference/usenixsecurity20/presentation/lehmann https://www.usenix.org/conference/usenixsecurity20/presentat...