News for hackers. Stuff that matters.

A comment on QuickJS Running in WebAssembly.

Re:QuickJS Running in WebAssembly by pyrolistical on Sunday November 20, 2022 @02:13AM (#33679006)
Running user provided js in quickjs in webassembly in a worker in an sandboxed iframe on a different domain would offer many layers of security
[ Parent | on HN ]
Re:QuickJS Running in WebAssembly by auggierose on Sunday November 20, 2022 @02:20AM (#33679034)
I think that is what Figma does: https://www.figma.com/blog/an-update-on-plugin-security/
[ Parent | on HN ]
Re:QuickJS Running in WebAssembly by jitl on Sunday November 20, 2022 @02:57AM (#33679192)
The library was inspired by Figma’s blog posts about their plug-in system: https://github.com/justjake/quickjs-emscripten#background
[ Parent | on HN ]
Re:QuickJS Running in WebAssembly by auggierose on Sunday November 20, 2022 @03:09AM (#33679240)
Ah ok, I see.
[ Parent | on HN ]
Re:QuickJS Running in WebAssembly by nine_k on Sunday November 20, 2022 @06:28AM (#33680096)
One of the companies I worked for did exactly that to safely run customers' JS code, while also limiting / extending the API surface available.

The performance was quite adequate.

[ Parent | on HN ]