Show HN: Sandworm.js – Easy auditing and sandboxing for JavaScript dependencies

Posted by sebivaduva on Friday October 07, 2022 @11:09AM
from the show-hn dept.

( 3 comments | 4 points | on HN )

Re:Show HN: Sandworm.js – Easy auditing and sandboxing for J... by cphoover on Monday October 10, 2022 @12:48AM (#33147881)

Hmmm wouldn't you want to intercept syscalls at the kernel level like AppArmor instead of at the application level?

[ Parent | on HN ]

Re:Show HN: Sandworm.js – Easy auditing and sandboxing for J... by cphoover on Monday October 10, 2022 @08:43AM (#33150614)

This is cool though

[ Parent | on HN ]

Re:Show HN: Sandworm.js – Easy auditing and sandboxing for J... by gabidobocan on Tuesday October 11, 2022 @04:03AM (#33160588)

Thanks!

Yes you can (and should) also intercept at kernel level, but the kernel can't tell which of your app's dependencies is responsible for the call, only the application knows that.

[ Parent | on HN ]