googlearchive/caja
View on GitHub ↗ ★ 1,128 Java archived
Caja is a tool for safely embedding third party HTML, CSS and JavaScript in your website.
6 mentions on Hacker News by 6 people: 0 stories, 6 comments · first 2015-12-14 · latest 2020-01-05
20082026
-
…any code running in the same process space given how hard it is to fix spectre in general. [1] https://github.com/google/caja/wiki/SES#current-date-and-tim... [2] https://github.com/Agoric/SES/tree/master/demo#taming-dateno...
comment by teh · 2020-01-05 · in Secure EcmaScript, a runtime for running third-party code safely -
…be mine. The old Google Caja, from the EcmaScript-5 days preceding Proxies, did something similar: https://github.com/google/caja/blob/master/src/com/google/ca... The full new pattern, combining "with(proxy)" with a clever use of direct…
comment by erights · 2019-08-23 · in How to build a plugin system on the web and also sleep well at night -
…Push's display using the canvas API. https://twitter.com/lwansbrough/status/1125842014128312320 [0] https://github.com/google/caja [1] https://github.com/lwansbrough/attack/blob/master/src/areas/...
comment by lwansbrough · 2019-08-23 · in How to build a plugin system on the web and also sleep well at night -
…(or whatever) into a runtime that just doesn't do these things? They already invented that: https://github.com/google/caja "Caja uses an object-capability security model to allow for a wide range of flexible security policies, so that your…
comment by progval · 2019-06-26 · in Why is Stack Overflow trying to start audio? -
…js, will not be supported in all browsers, and will require dev work on your side: * Google Caja https://github.com/google/caja * MentalJS https://github.com/hackvertor/MentalJS other options are available as well, in varying levels of…
comment by rsj_hn · 2019-06-26 · in Why is Stack Overflow trying to start audio? -
Also, Google has a tool called Caja that is open source: https://github.com/google/caja
comment by Alex3917 · 2015-12-14 · in Email made me miserable, so I decided to build my own email app from scratch