Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

XMLUI does not execute JavaScript with "eval" or anything that would not comply with CSP. It runs interpreted JavaScript asynchronously in a sandbox and does not allow use of "eval" (and another dozen low-level functions, such as setTimeout).


So the project has implemented a custom JavaScript parser and evaluator in TypeScript?


that is insane.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: