Running Untrusted JavaScript Code

• extism

  51 4,125 8.9 Rust

  The framework for building with WebAssembly (wasm). Easily load wasm modules, move data, call functions, and build extensible apps.

  

  This is an exciting option as it provides a sandboxed environment to run code. One caveat is that you need an environment with Javascript bindings. However, an interesting project called Extism facilitates that. You might want to follow their tutorial.

• InfluxDB

  www.influxdata.com featured

  Purpose built for real-time analytics at any scale. InfluxDB Platform is powered by columnar analytics, optimized for cost-efficient storage, and built with open data standards.

  

• sysbox

  23 2,695 8.8 Shell

  An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

  

  Moreover, you might benefit from taking a look at sysbox, a VM-like container runtime that provides a more secure environment. Sysbox is worth it, especially if the main app is running in a container, which means that you'll be running Docker in Docker.

• esprima

  9 7,017 0.0 TypeScript

  ECMAScript parsing infrastructure for multipurpose analysis

  

  I'm particularly fond of Firecracker, but it’s a bit of work to set up, so if you cannot afford the time yet, you want to be on the safe side, do a combination of static analysis and time-boxing execution. You can use esprima to parse the code and check for any malicious act.

Suggest a related project