4 ms·
I can't find it at the moment, but there's a very cool javascript sandbox system at Google Code somewhere. I believe it creates an iframe with a separate domai
by axod 17y ago
I can't find it at the moment, but there's a very cool javascript sandbox system at Google Code somewhere.
I believe it creates an iframe with a separate domain, writes the js into it, and communicates via message passing/anchor etc.
The net result is that you can execute unsafe js, in a sandbox on your page and expose an API to it.
- defen 17y agoAre you thinking of caja? http://code.google.com/p/google-caja/ http://code.google.com/p/google-caja/
- aristus 17y agohttp://code.google.com/p/google-caja/ http://code.google.com/p/google-caja/ It's not an iframe, it's a capability-based filter which provides more security than an iframe can. A lot of sites use it now that it's reasonably fast...