[WEB SECURITY] JSReg: Javascript based RegExp sandbox

gaz Heyes gazheyes at gmail.com
Tue Jun 30 14:21:48 EDT 2009


2009/6/30 Matt Jones <mkjones at cs.stanford.edu>

> It might be worth checking out Facebook's FBJS, which has a similar goal of
> sandboxing user-submitted javascript.  Though I don't believe the actual
> engine is written in javascript, it might give you ideas as to more corner
> cases:


I've Jeff Walden et all break this sandbox to pieces and I don't think I
could trust the code. At least if my code breaks it's my fault.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webappsec.org/pipermail/websecurity_lists.webappsec.org/attachments/20090630/2e642cb9/attachment.html>


More information about the websecurity mailing list