Hacker GitHub

← All repos

googlearchive/caja

View on GitHub ↗ ★ 1,128 Java archived

Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.

6 mentions on Hacker News by 6 people: 0 stories, 6 comments · first 2015-12-14 · latest 2020-01-05

Mentions per year 6 mentions · busiest year 2019 (4)
20082026
  1. …any code running in the same process space given how hard it is to fix spectre in general. [1] https://github.com/google/caja/wiki/SES#current-date-and-tim... [2] https://github.com/Agoric/SES/tree/master/demo#taming-dateno...
  2. …be mine. The old Google Caja, from the EcmaScript-5 days preceding Proxies, did something similar: https://github.com/google/caja/blob/master/src/com/google/ca... The full new pattern, combining "with(proxy)" with a clever use of direct…
  3. …Push's display using the canvas API. https://twitter.com/lwansbrough/status/1125842014128312320 [0] https://github.com/google/caja [1] https://github.com/lwansbrough/attack/blob/master/src/areas/...
  4. …(or whatever) into a runtime that just doesn't do these things? They already invented that: https://github.com/google/caja "Caja uses an object-capability security model to allow for a wide range of flexible security policies, so that your…
  5. …js, will not be supported in all browsers, and will require dev work on your side: * Google Caja https://github.com/google/caja * MentalJS https://github.com/hackvertor/MentalJS other options are available as well, in varying levels of…
  6. Also, Google has a tool called Caja that is open source: https://github.com/google/caja