Comment on QuickJS Running in WebAssemblyComments−pyrolistical3yRunning user provided js in quickjs in webassembly in a worker in an sandboxed iframe on a different domain would offer many layers of security−auggierose3yI think that is what Figma does: https://www.figma.com/blog/an-update-on-plugin-security/−jitl3yThe library was inspired by Figma’s blog posts about their plug-in system: https://github.com/justjake/quickjs-emscripten#background−auggierose3yAh ok, I see.−nine_k3yOne of the companies I worked for did exactly that to safely run customers' JS code, while also limiting / extending the API surface available.The performance was quite adequate.
Comments
Running user provided js in quickjs in webassembly in a worker in an sandboxed iframe on a different domain would offer many layers of security
I think that is what Figma does: https://www.figma.com/blog/an-update-on-plugin-security/
The library was inspired by Figma’s blog posts about their plug-in system: https://github.com/justjake/quickjs-emscripten#background
Ah ok, I see.
One of the companies I worked for did exactly that to safely run customers' JS code, while also limiting / extending the API surface available.
The performance was quite adequate.