caja
workerbox
caja | workerbox | |
---|---|---|
2 | 5 | |
1,117 | 124 | |
- | - | |
10.0 | 5.6 | |
over 3 years ago | 9 months ago | |
Java | JavaScript | |
Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
caja
- Show HN: Run unsafe user generated JavaScript in the browser
-
The Complicated Futility of WordPress
> PHP code is not sandboxable
People said the same about JavaScript, and yet smart people figured out ways to do it. For example: https://github.com/googlearchive/caja
PHP may be particularly challenging to sandbox, but it's not too much for talented engineers to figure out.
workerbox
-
Show HN: Run unsafe user generated JavaScript in the browser
It's a really good question, and I originally [0] actually had some code that would randomise the sub domain. You can still do this if you host it yourself.
But I think it's probably not nessisary so long as your users are not using indexDB (or any other data storage on that domain), as there should be no other way for the web workers to communicate with each other.
0. https://github.com/markwylde/workerbox/blob/master/lib/index...
What are some alternatives?
wordpress-develop - WordPress Develop, Git-ified. Synced from git://develop.git.wordpress.org/, including branches and tags! This repository is just a mirror of the WordPress subversion repository. Please include a link to a pre-existing ticket on https://core.trac.wordpress.org/ with every pull request.
determine-basal-native
lumina - Lumina Desktop Environment
jailed - execute untrusted code with custom permissions
cinnamon-spices-applets - Applets for the Cinnamon desktop
quickjs-emscripten - Safely execute untrusted Javascript in your Javascript, and execute synchronous code that uses async functions
rs_asio - ASIO for Rocksmith 2014
proposal-shadowrealm - ECMAScript Proposal, specs, and reference implementation for Realms
Directus - The Modern Data Stack 🐰 — Directus is an instant REST+GraphQL API and intuitive no-code data collaboration app for any SQL database.
vm2-process - Execute unsafe javascript code in a sandbox
deno - A modern runtime for JavaScript and TypeScript.
SES-shim - Endo is a distributed secure JavaScript sandbox, based on SES