From: es-discuss [mailto:[email protected]] On Behalf Of Ron Waldon

> Are there CSP benefits for other JavaScript environments (e.g. Node.js)?

Yes; it is something that could in theory be exposed through Node's vm module 
(i.e. Realm creation API), which would help certain sandboxing use cases people 
use that for.

> Would there be benefits in applying CSP at the module level? e.g. module A 
> has been vetted and can do these things, whilst module B is less trusted and 
> has strict limitations

I think this is a different proposal than CSP, which operates on a Realm level.
_______________________________________________
es-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es-discuss

Reply via email to