Hacker News new | ask | show | jobs
by riscy 989 days ago
No. A JIT requires marking pages of runtime-generated data as executable. It’s an attacker’s dream: https://en.wikipedia.org/wiki/JIT_spraying

The entire compiler and language-runtime using a JIT becomes an attack surface. Securing Javascript is hard enough.