isolated-vm icon indicating copy to clipboard operation
isolated-vm copied to clipboard

Secure & isolated JS environments for nodejs

Results 70 isolated-vm issues
Sort by recently updated
recently updated
newest added

# What I did I wrote a simple Node.js module that creates a fresh V8 isolate, does this just once, and exits: ```javascript await execution_context.eval( /* a very long `string`...

```javascript await execution_context.eval("var window = {};"); // Created “globalThis.window” from inside await execution_context.global.set("window", 1); // Setting it fails, not overwriting. ``` ----- https://github.com/laverdet/isolated-vm/blob/22ed400de4cd65cbe537614af59228b3fc416f4b/src/module/reference_handle.cc#L597-L599 ``` TypeError: Set failed at () ```...

Hey there, firstly thank you for this excellent library! 🙌 We are experiencing an issue similar to #156, where very occasionally an isolate hangs and locks up the node process....

First, congratulations for this module! I have considered it, and I have a doubt from Security instructions: "It's a good idea to keep instances of isolated-vm in a different nodejs...

Here is a simple piece of JS code I want to execute in isolation - ``` const ivm = require("isolated-vm"); const fetch = require("node-fetch"); const isolate = new ivm.Isolate({ memoryLimit:...

Hi team, This is a developer from Rudderstack. We are using isolated-vm to run user-transformations(3rd party functions defined by the users). Recently we encountered an issue when a user is...

Hey there, I really enjoy this package but i ran into the following error: terminate called after throwing an instance of 'ivm::FatalRuntimeError' Basicly my setup is like this: The limit...

Is it possible to block eval() when executing countUp() in below example? Reading through your code & v8 docs, v8 does provide a capability to restrict eval/Function constructor. https://v8docs.nodesource.com/node-0.8/df/d69/classv8_1_1_context.html#ab67376a3a3c63a23aaa6fba85d120526 const...

Hi I have a code snippet which is calling the javascript bind function, using the compileScript and then runIgnored functions, something like the following: `a.method.bind(a)` which is throwing an error:...

We are using isolated-vm to execute user sent scripts on our server. ``` function createIvm() { const isolateVmMem = 128; const isolate = new ivm.Isolate({ memoryLimit: isolateVmMem,onCatastrophicError:(a,b,c,)=>{console.log('onCatastrophicError',a,b,c)} }); const context...