Comments on: Cross browser javascript sandbox

By: Elijah Grey

Elijah Grey — Sun, 06 Sep 2009 23:15:41 +0000

I have created a JavaScript sandboxing library that uses web worker threads. It’s called JSandbox.

Gareth Heyes — Mon, 27 Jul 2009 22:30:17 +0000

Do not use this sandbox, the concept is broken. I’ve created a new sandbox based on RegExps, use this instead:-

Gareth Heyes — Mon, 06 Apr 2009 08:45:26 +0000

I’ve improved the sandbox by checking referrers, this should remove the need for a site vulnerable to XSS.

But the sandbox will still work when originating from the correct site.

Gareth Heyes — Mon, 06 Apr 2009 07:02:25 +0000

Cool thanks, let me know if you find one Simple is always better

thornmaker — Mon, 06 Apr 2009 02:56:32 +0000

spent some time playing with this tonight with SDC. no breakouts so far. amazing how simple the code is