2026-09-30 23:10 UTC
@joe@f.duriansoftware.com Something tells me attempts to do Caja for TCL would end the same way Caja for JS did. :)
But! If you could feasibly and reliably allowlist the objects in the execution context, the idea makes sense. The problem is Spicy Object Graph Connectivity, moreso than that the idea could never work in principle.
Replies (1)
-
@fugueish@wandering.shop 2026-10-01 00:19
@joe@f.duriansoftware.com Man, the 1993 date on this... incredible. "Recent research [10]"... ok, let's look at [10]. Oh it's by the same guy: https://dl.acm.org/doi/epdf/10.1145/143457.143463 Surely, this is a deep dive into the sandboxing problem, ca. 1992? He's solved something hard? No. The solution presented there is: Well, email is already unsafe, so actually we're fine. Also, yeah, the real problem is reading private files. The solution: the same bare assertion that sandboxing is just a SMOP. How did this get published