6 ms·
Can it run untrusted worker code in "sandbox iframe" mode? Something like jailed. Or do these both go together?
by throwaway290 3y ago
Can it run untrusted worker code in "sandbox iframe" mode? Something like jailed. Or do these both go together?
- cyanydeez 3y agoI'd not trust anyt webworkers as a jail. Look into quickjs if you want untrusted JavaScript in the browser. A quick read suggests it's note wiring iframe comes which requires another abstractions.
- throwaway290 3y agoproperly sandboxed iframe is pretty secure and qjs is big and written in C. Anyway from a quick read I saw that plenty people use comlink with iframes, thanks though