Hacker News new | ask | show | jobs
by cogman10 1866 days ago
You'd have to sandbox the analyzer. Let it run arbitrary code but don't let it do IO. That can be pretty tricky to do for a language not designed to be sandboxed.

Safest way would probably be something hilarious like having the analyzer compiled to WASM and ran in node.js.