radur

PostsComments

DDeno

•Created by PNPerson on 2/10/2024 in #help

Running untrusted code, eval-style

If the code that gets executed is completely untrusted the safest choice would be to spawn a new instance of deno and pass the code to it to be evaluate.

3 replies

DDeno

•Created by PNPerson on 2/10/2024 in #help

Running untrusted code, eval-style

Run it in a separate worker (worker pool), restrict the worker security as much as possible, use the Function constructor for the evaluation. See https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/eval#never_use_eval!

3 replies