Hi Dustin

Where are you wanting to evaluate this?

Something like https://github.com/google/caja or http://www.adsafe.org/ may
be useful.

We probably need to know a bit more about the usage scenario to give more
specific advice.

--
Daniel.

On Sun, Jul 16, 2017 at 10:30 AM Dustin Getz <dustin.g...@gmail.com> wrote:

> Is it theoretically possible to modify cljs compiler to remove all special
> forms for outside-world effects? So for example, js/window, js/document,
> js*, aset, cookies, console.log, XHR etc. If this were achieved, could we
> evaluate arbitrary user supplied forms without fear? Would this be a secure
> sandbox? Denial of service like an infinite loop would be a problem. A
> monadic construct could be used to permit very controlled effects.
>
> --
> Note that posts from new members are moderated - please be patient with
> your first post.
> ---
> You received this message because you are subscribed to the Google Groups
> "ClojureScript" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to clojurescript+unsubscr...@googlegroups.com.
> To post to this group, send email to clojurescript@googlegroups.com.
> Visit this group at https://groups.google.com/group/clojurescript.
>

-- 
Note that posts from new members are moderated - please be patient with your 
first post.
--- 
You received this message because you are subscribed to the Google Groups 
"ClojureScript" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to clojurescript+unsubscr...@googlegroups.com.
To post to this group, send email to clojurescript@googlegroups.com.
Visit this group at https://groups.google.com/group/clojurescript.

Reply via email to