Re:Node.js sandbox - executes untrusted JavaScript for embed...
by endianswap on Tuesday January 03, 2012 @01:23AM
(#3418847)
Excuse my ignorance, but how frequently do developers find an application for such a system? I haven't written many external-facing web projects (I can generally trust each of the couple dozen users of my internal applications) so I don't have much experience in this field, but still I can't imagine an application I might want to write someday that would consume user submitted code (save for a product like CodePad but I figure there are plenty of those already :).)
[ Parent
| on HN ]
Re:Node.js sandbox - executes untrusted JavaScript for embed...
by adamlindsay on Tuesday January 03, 2012 @06:47AM
(#3419336)
Take an eCommerce system for instance, you want to open up complex shipping or discount calculations to your end users. A great way to to do this is to allow them to write a function that takes in known objects and returns a result. Say it takes in a cart/line_items and returns back a calculated amount. Obviously its a bit more complex then that, but it is a great way to expose some functionality without exposing the entire system.
Re:Node.js sandbox - executes untrusted JavaScript for embed...
by trun on Tuesday January 03, 2012 @03:26AM
(#3419023)
I was just working on something like this for a coding competition. Players submit code to compete head to head. Sandboxing is required to prevent players from modifying the game state and/or the other players' state. That's just one example that comes to mind...