4 ms·
A shared object that is loaded in the same thread/process as the rest of your application is not sandboxed from your application.
by 10000truths 3y ago
A shared object that is loaded in the same thread/process as the rest of your application is not sandboxed from your application.
- amluto 3y agoThat's true. But both in-process and out-of-process sandboxing are doable, as is writing code in a manner that is provably (for various definitions of provability) free of various classes of side effects.
- ptx 3y agoIn can be with RLBox[0], which compiles the code to WebAssembly and then back to C. It's used in Firefox to sandbox various format parsing libraries. [0] https://rlbox.dev/ https://rlbox.dev/