jailed VS proposal-compartments

Compare jailed vs proposal-compartments and see what are their differences.

jailed

execute untrusted code with custom permissions (by asvd)
Suggest topics
Source Code
Suggest alternative
Edit details

proposal-compartments

Compartmentalization of host behavior hooks for JS (by tc39)
Suggest topics
Source Code
Suggest alternative
Edit details
SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App
With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.
surveyjs.io
featured
InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
jailed proposal-compartments
2 1
994 111
- 0.0%
0.0 10.0
about 4 years ago over 1 year ago
JavaScript HTML
MIT License MIT License
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

jailed

Posts with mentions or reviews of jailed. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-11-19.
  • Show HN: Run unsafe user generated JavaScript in the browser
    14 projects | news.ycombinator.com | 19 Nov 2022
    What advantages does workerbox have over existing solutions like jailed [1]?

    [1] https://github.com/asvd/jailed

  • Sandboxed language/interpreter to embed in browser to run untrusted code
    1 project | /r/webdev | 24 Apr 2021
    So far I'm thinking using a iframe/worker sandbox might be acceptable, this library comes to mind. However it also seems to have some security issues that I'd need to watch for. I'm not 100% sure but I believe I could avoid a lot of issues by using either jailed or doing my own iframe worker sandbox, and serving the user scripts from another domain. This seems to be similar to what platforms like jsfiddle and the like do. However this sounds rather irritating to deal with.

proposal-compartments

Posts with mentions or reviews of proposal-compartments. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-11-19.
  • Show HN: Run unsafe user generated JavaScript in the browser
    14 projects | news.ycombinator.com | 19 Nov 2022
    There's a related proposal for Compartments and Module constructor is a prerequisite to that. A shim for the entire thing exists, with lockdown and Compartments isolating code:

    https://github.com/endojs/endo/tree/master/packages/ses

    https://github.com/tc39/proposal-compartments/

    It has usage already, eg. metamask snaps

What are some alternatives?

When comparing jailed and proposal-compartments you can also consider the following projects:

determine-basal-native

workerbox - A secure sandbox to execute untrusted user JavaScript, in a web browser, without any risk to your own domain/site/page.

json-editor - JSON Schema Based Editor

Pentive - Collaborative Spaced Repetition

vm2-process - Execute unsafe javascript code in a sandbox

proposal-shadowrealm - ECMAScript Proposal, specs, and reference implementation for Realms

quickjs-emscripten - Safely execute untrusted Javascript in your Javascript, and execute synchronous code that uses async functions

caja - Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.

jailed vs determine-basal-native proposal-compartments vs workerbox jailed vs workerbox proposal-compartments vs determine-basal-native jailed vs json-editor proposal-compartments vs json-editor jailed vs Pentive jailed vs vm2-process jailed vs proposal-shadowrealm jailed vs quickjs-emscripten jailed vs caja