Run-sandbox NPM

run-sandbox

Last version

Runs untrusted code in a Node.js v8 sandbox. Built on top of v8-sandbox.

Install

npm install run-sandbox --save

Usage

const runSandbox = require('run-sandbox')

/* This function will run in a sandbox, in a separate process */
const sum = runSandbox((y, z) => y + z)

/* Interact with it as usual from your main code */
const result = await sum(3, 2)

console.log(result)

You can also use `require' for external dependencies:

const isEmoji = runSandbox(emoji => {
  const isEmoji = require('is-standard-emoji')
  return isEmoji(emoji)
})

await isEmoji('🙌') // => true
await isEmoji('foo') // => false

The dependencies are bundled with the source code into a single file that is executed in the sandbox.

It's intentionally not possible to expose any Node.js objects or functions directly to the sandbox (such as process, or filesystem). This makes it slightly harder to integrate into a project, but has the benefit of guaranteed isolation.