Hacker News new | ask | show | jobs
by simonw 170 days ago
Mainly defence in depth.

I have enormous respect for Fabrice but mquickjs is only a few weeks old and I'm no way near skilled enough to audit his C code!

Running it in WASM feels a lot safer to me.
1 comments
15155 170 days ago
At that point why not just run V8 isolates, if JS is your only guest?
link
simonw 169 days ago
I'm having trouble finding a library for running v8 isolates from Node.js or Python doesn't include a warning in the README not to use it to run untrusted code.
link
15155 169 days ago
https://github.com/laverdet/isolated-vm

https://github.com/fulcrumapp/v8-sandbox

But yeah, interesting, it might not exist.

link