kumavis

https://github.com/jterrace/js.js - "js.js is a JavaScript interpreter in JavaScript. Instead of trying to create an interpreter from scratch, SpiderMonkey is compiled into LLVM and then emscripten translates the output into...

https://github.com/NeilFraser/JS-Interpreter - "A sandboxed JavaScript interpreter in JavaScript."

https://github.com/js-js/js.js/ - is really really WIP but a project worth taking a look at. JIT-compiles and runs js.

I made a thing https://github.com/kumavis/iframe-sandbox - creates a sandboxed iframe with methods for eval and writing to document body

nowadays I'm using [SecureEcmaScript (SES)](https://github.com/agoric/ses), based on the [Realms shim](https://github.com/Agoric/realms-shim) I'm using it in my secure app builds project [LavaMoat](https://github.com/lavamoat/overview)

Here's the kernel of how the realms shim works, quite clever. The first `arguments[0]` is a Proxy that enforces the endowments whitelist (it will throw an error if you try...

No problem! It was a noble attempt, has yielded insight and identified pitfalls. I'm hunting for a solution but it sounds like it will require a 'metacircular interpreter' approach where...

I have some questions - I'm `kumavis` on freenode irc - hit me up if you get a chance

This is now the most critical issue, until I find another glaring security hole : )

Yeah this is a tricky one eh. AFAICT, it would require modifying the code to have a return statement on the last line of the program. This would be easy...