Hacker News new | ask | show | jobs
by cfvergara 3533 days ago
Why not use Google Caja instead of a separate sandbox?
1 comments

Overkill for what was never intended to be a sandbox for untrusted code. The “sandboxing”, like Django templates’, Jinja, Nunjucks, etc. is a well-intended measure to keep logic out of templates, but in practice only really gets in the way and causes mistaken assumptions about security.