I need to run code supplied by an unknown source which validates or sorts something.
How can I do this safely in Node.js?
Python has RestrictedPython, anything similar?
There is also ADsafe for the browser, but is it usable in Node.js?
Node has an excellent tool for this, the node.vm. Basically you can run a script in its own context, effectively sandboxing it.
Of course, since Node runs on a single thread, a harmful script can always shut down your server just by doing:
while (true) {;}
To be completely safe, you need to spawn a new process and use message passing for communication.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With