Re:WebAssembly and Back Again: Fine-Grained Sandboxing in Fi...
by masklinn on Monday December 06, 2021 @02:43PM
(#29464578)
> Why aren't there just compiler flags that can enforce the same restrictions they want?
Because they want to compile arbitrary code in order to sandbox it.
The alternative is something like eBPF, but that imposes a limited subset of the source language, which would be unlikely to work with something like a video decoder.
Because they want to compile arbitrary code in order to sandbox it.
The alternative is something like eBPF, but that imposes a limited subset of the source language, which would be unlikely to work with something like a video decoder.