safeify icon indicating copy to clipboard operation
safeify copied to clipboard

📦 Safe sandbox that can be used to execute untrusted code.

Results 33 safeify issues
Sort by recently updated
recently updated
newest added

vm2有 VM, NodeVM 可选, 目前这个库好像不支持require引用,能否支持呢? 由业务自己选择用什么

## 描述 在下面的代码中,在沙箱中调用 add 方法时,通过 `while (true) {}` 阻塞主进程,按理说只应该阻塞子进程,在 timeout 后报错,但并没有,这段代码会一直卡住,阻塞主进程。 ```javascript const {Safeify} = require('./lib') let debug = require('debug'); debug.enable('safeify'); const safeVm = new Safeify({ timeout: 50, //超时时间,默认 50ms...

执行函数中写入一个持续执行脚本,超时之后并不会结束进程 ![image](https://user-images.githubusercontent.com/22877154/91267763-9d6d6100-e7a6-11ea-9e85-545b99663c6d.png)

Bumps [ws](https://github.com/websockets/ws) from 6.2.1 to 6.2.2. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ws&package-manager=npm_and_yarn&previous-version=6.2.1&new-version=6.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

``` const context = { system:{ load_wasm(module_name,funtion_name,params){ let { funtion_name } = require('../pkg/module_name.js') let hello = funtion_name(params) delete require.cache[require.resolve('../pkg/module_name.js')]; return hello } } } async function load_wasm_module(module_name,funtion_name){ let safeVm =...

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.7.1 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...

dependencies

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.1.0 to 4.7.7. Changelog Sourced from handlebars's changelog. v4.7.7 - February 15th, 2021 fix weird error in integration tests - eb860c0 fix: check prototype property access in...

dependencies

Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2. Commits See full diff in compare view Maintainer changes This version was pushed to npm by oss-bot, a new releaser for y18n since your...

dependencies

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependencies

Bumps [bl](https://github.com/rvagg/bl) from 1.2.2 to 1.2.3. Commits d69edfd 1.2.3 847473a test all branches 0bd87ec Fix unintialized memory access dc097f3 test newer versions of Node See full diff in compare view...

dependencies