TreeHouse
TreeHouse copied to clipboard
lawnsea
Sandbox JavaScript with Web Workers
Results
2
TreeHouse issues
Sort by
recently updated
recently updated
newest added
James Mickens pointed out in the Q&A of my Usenix talk that the broker is vulnerable to prototype poisoning by guest code. The simplest solution to this problem is to...
Currently, we assume that the broker is running in `src/` and prepend all guest script URLs with `../`. This breaks absolute URLs and is generally inflexible. The sandbox should allow...