Comments inline On Fri, Mar 4, 2016 at 11:08 PM, Domenic Denicola <[email protected]> wrote: > From: es-discuss [mailto:[email protected]] On Behalf Of Ron > Waldon > >> Are there CSP benefits for other JavaScript environments (e.g. Node.js)? > > Yes; it is something that could in theory be exposed through Node's vm module > (i.e. Realm creation API), which would help certain sandboxing use cases > people use that for.
That seems like it would be very nice for jsdom as well. Testing that something works with and without `Function`/etc. headlessly. > >> Would there be benefits in applying CSP at the module level? e.g. module A >> has been vetted and can do these things, whilst module B is less trusted and >> has strict limitations > > I think this is a different proposal than CSP, which operates on a Realm > level. > _______________________________________________ > es-discuss mailing list > [email protected] > https://mail.mozilla.org/listinfo/es-discuss Isiah Meadows [email protected] _______________________________________________ es-discuss mailing list [email protected] https://mail.mozilla.org/listinfo/es-discuss
