Reputation: 1194
Is there a safe way in which untrusted javascript can be loaded into a page and trusted not to cause harm?
I would like to create an executable wiki containing user contributed javascript. But, I am concerned that malicious javascript could hijack the page and compromise the user's account on my system.
Are there workable ways to isolate javascript?
Upvotes: 1
Views: 107
Reputation: 11132
Yes. Try Google Caja, which does exactly what (I think) you want.
Upvotes: 1