4 ms·
Indeed, thanks for explaining. Oh, and your mention of Graal reminds me of reading here 56 days ago that it has some support (JavaScript-only at that time) for
by mlinksva 3y ago
Indeed, thanks for explaining.
Oh, and your mention of Graal reminds me of reading here 56 days ago that it has some support (JavaScript-only at that time) for sandboxing itsself https://news.ycombinator.com/item?id=37572536 https://news.ycombinator.com/item?id=37572536 presumably not nearly as fine-grained as capability-based schemes mentioned in the OP, but still a useful step perhaps.
- mike_hearn 3y agoIt's actually usable as a capability system. You can just run code in a context without permissions and then pass in cap objects that are exposed to that context.