tc39/proposal-ses
View on GitHub ↗ ★ 248 HTML
Draft proposal for SES (Secure EcmaScript)
10 mentions on Hacker News by 9 people: 3 stories, 7 comments · first 2017-09-18 · latest 2023-02-11
20082026
-
…and/or SES[2], and Built-in Modules (JS STL)[3]. 1: https://github.com/tc39/proposal-shadowrealm 2: https://github.com/tc39/proposal-ses 3: https://github.com/tc39/proposal-built-in-modules
comment by eyelidlessness · 2022-09-27 · in Named element IDs can be referenced as JavaScript globals -
…fundamental barrier right now seems to be performance, which could be addressed by runtime support. https://github.com/tc39/proposal-ses https://github.com/endojs/endo
comment by 3np · 2022-04-11 · in Node.js packages don't deserve trust -
…author, the API is practically stable and it will shortly have its first stable release. [0]: https://github.com/tc39/proposal-ses [1]: https://github.com/endojs/endo/tree/master/packages/ses [2]: https://github.com/LavaMoat/LavaMoat
comment by Legogris · 2022-03-17 · in NPM package compromised by author: erases files on RU / BY computers on install -
…in webassembly to eval your code. https://github.com/tc39/proposal-realms/#ecmascript-spec-pro... https://github.com/tc39/proposal-ses https://github.com/justjake/quickjs-emscripten
comment by tonyhb · 2021-01-26 · in Evaluating JavaScript in the browser for a low code product -
…but literally no stable browser release supports report-to yet. It's also not really enough. https://github.com/tc39/proposal-frozen-realms is a useful extension, since it would allow frameworks to do what they need to set up everything…
comment by Jach · 2018-07-12 · in Neatly Bypassing Content Security Policy -
…not the eval function. There's a proposal to tame the JS global environment along those lines: https://github.com/tc39/proposal-frozen-realms Note however that the threat model here does not include denial of service. You have to address…
comment by abecedarius · 2018-06-03 · in A Case for Safe Eval -
I don't know its current status with the committee, but https://github.com/tc39/proposal-frozen-realms proposes something equivalent to Caja for modern JS. It can be a lot simpler now because ES6+ is much closer to what's needed than JS…
comment by abecedarius · 2017-09-18 · in W3C abandons consensus, standardizes DRM, EFF resigns