undefined | Better HN

0 pointssimonw4mo ago0 comments

Mainly defence in depth.

I have enormous respect for Fabrice but mquickjs is only a few weeks old and I'm no way near skilled enough to audit his C code!

Running it in WASM feels a lot safer to me.

0 comments

151554mo ago

At that point why not just run V8 isolates, if JS is your only guest?

simonwOP4mo ago

I'm having trouble finding a library for running v8 isolates from Node.js or Python doesn't include a warning in the README not to use it to run untrusted code.

151554mo ago

https://github.com/laverdet/isolated-vm

https://github.com/fulcrumapp/v8-sandbox

But yeah, interesting, it might not exist.

j / k navigate · click thread line to collapse

0 comments

151554mo ago

At that point why not just run V8 isolates, if JS is your only guest?

simonwOP4mo ago

I'm having trouble finding a library for running v8 isolates from Node.js or Python doesn't include a warning in the README not to use it to run untrusted code.

151554mo ago

https://github.com/laverdet/isolated-vm

https://github.com/fulcrumapp/v8-sandbox

But yeah, interesting, it might not exist.

j / k navigate · click thread line to collapse