jailed javascript engine ?

[Luna@Jazz.it]

Is there any implementation of the javascript engine that can be run
in a jailed environement?

Thanks.

[Thomas 'PointedEars' Lahn]

Re: jailed javascript engine ?

Luna@Jazz.it wrote:
[color=blue]
> Is there any implementation of the javascript engine that can be run
> in a jailed environement?[/color]

Define that.


PointedEars

[Luna@Jazz.it]

Re: jailed javascript engine ?

I mean a standalone implementation of javascript which would be made to operate within a fixed directory, period.

No possibility to get out to create temporary files, symbolic links to files outside this directory; no possibility for example, to set cookies outside either.

No possibility to get called from within a browser which could afterwards create/manipulate files outside of that environment.

OK. Maybe (not default) could be configured to do so... ;)

Thomas 'PointedEars' Lahn <PointedEars@we b.de> wrote:[color=blue]
> Luna@Jazz.it wrote:[/color]
[color=blue][color=green]
>> Is there any implementation of the javascript engine that can be run
>> in a jailed environement?[/color][/color]
[color=blue]
> Define that.[/color]

[color=blue]
> PointedEars[/color]

[Robert]

Re: jailed javascript engine ?

In article <MmzSc.3669$jZ5 .2014@clgrps13> , Luna@Jazz.it wrote:
[color=blue]
> I mean a standalone implementation of javascript which would be made to
> operate within a fixed directory, period.
>[/color]

mozilla.org offers two open source version of a JavaScript interpreter.


SpiderMonkey is the code-name for the Mozilla's C implementation of
JavaScript. See:

http://www.mozilla.org/js/spidermonkey/

Rhino is an open-source implementation of JavaScript written entirely in
Java. See:

http://www.mozilla.org/rhino/

Robert

[Luna@Jazz.it]

Re: jailed javascript engine ?

I knew that.

But that means go through the source and maybe modify the code so as to achieve
what I want.

Just wanted to know if anybody had done it so far.

Wouldn't be surprising in regard of the numerous exploits using javascript.

Robert <rccharles@my-deja.com> wrote:[color=blue]
> In article <MmzSc.3669$jZ5 .2014@clgrps13> , Luna@Jazz.it wrote:[/color]
[color=blue][color=green]
>> I mean a standalone implementation of javascript which would be made to
>> operate within a fixed directory, period.
>>[/color][/color]
[color=blue]
> mozilla.org offers two open source version of a JavaScript interpreter.[/color]

[color=blue]
> SpiderMonkey is the code-name for the Mozilla's C implementation of
> JavaScript. See:[/color]
[color=blue]
> http://www.mozilla.org/js/spidermonkey/[/color]

[color=blue]
> Rhino is an open-source implementation of JavaScript written entirely in
> Java. See:[/color]
[color=blue]
> http://www.mozilla.org/rhino/[/color]


[color=blue]
> Robert[/color]