json-editor
vm2-process
json-editor | vm2-process | |
---|---|---|
1 | 1 | |
5,791 | 7 | |
- | - | |
10.0 | 3.7 | |
about 6 years ago | about 1 year ago | |
JavaScript | JavaScript | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
json-editor
vm2-process
-
Show HN: Run unsafe user generated JavaScript in the browser
There is vm2 [0] for nodejs, but if you look at the issues there are escapes found occasionally, even some this year. I think it's too risky to run untrusted code on node.
You could run a headless chrome using puppeteer, then run workerbox. But it's probably too much overhead for a server app.
Oh, if you're making a form builder, I have to recommend json-editor [1]. It's not mine and I haven't actually used it just (I've only found really recently), but basically you give a JSONSchema and it will make a form for you, with validations and conditionals all built in. Might come in useful.
0. https://github.com/markwylde/vm2-process
What are some alternatives?
caja - Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.
proposal-shadowrealm - ECMAScript Proposal, specs, and reference implementation for Realms
determine-basal-native
Pentive - Collaborative Spaced Repetition
jailed - execute untrusted code with custom permissions
SES-shim - Endo is a distributed secure JavaScript sandbox, based on SES
workerbox - A secure sandbox to execute untrusted user JavaScript, in a web browser, without any risk to your own domain/site/page.
proposal-compartments - Compartmentalization of host behavior hooks for JS
quickjs-emscripten - Safely execute untrusted Javascript in your Javascript, and execute synchronous code that uses async functions