Skip to content

Comment on Sandboxing Untrusted Python

Comments

Neither the article nor the README explains how it works.

How does it work? Which WASM euntime does it use? Does it use a Python jnterpreter compiled to WASM?

There's a link to the author's work here:

https://github.com/mavdol/capsule

(From the article)

Appears to be CPython running inside of wasmtime

yep, and to be specific, it leverages the WASM Component Model and uses componentize-py to bundle the user's script

See the linked project at the end: https://github.com/mavdol/capsule

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.