5 ms·
Reminds me of https://github.com/tildeio/oasis.js https://github.com/tildeio/oasis.js but not sure if it solves the same type of problem.
by Mc_Big_G 12y ago
Reminds me of https://github.com/tildeio/oasis.js https://github.com/tildeio/oasis.js but not sure if it solves the same type of problem.
- yoran 12y agoThis is interesting, I hadn't heard of Oasis.js. Both approaches try to solve the same problem, i.e. manage to sandbox third-party scripts. However, the implementation is different: oasis.js uses iframes, we chose for not using iframes, mainly because iframes are not enough to limit access to security-sensitive APIs such as XHR, Geolocation and local storage.
- Cyril-sf 12y agoOne constraint for Oasis.js when picking a technology was the compatibility with IE8. So we use modern technology everywhere we can, but we have to find a way to polyfill them for older browsers (mostly IE8/9).