SafeJS: Hermetic Sandboxing for JavaScript
type: Dataset
description: Isolating programs is an important mechanism to support more secure applications. Isolating program in dynamic languages such as JavaScript is even more challenging since reflective operations can circumvent simple mechanisms that could protect program parts. In this article we present SafeJS, an approach and implementation that offers isolation based on separate sandboxes and control of information exchanged between them. In SafeJS, sandboxes based on web workers do not share any data. Data exchanged between sandboxes is solely based on strings. Using different policies, this infrastructure supports the isolation of the different scripts that usually populate web pages. A foreign component cannot modify the main DOM tree in unexpected manner. Our SafeJS implementation is currently being used in an industrial setting in the context of the Resilience FUI 12 project.
issued: 2026-05-09T17:59:41.183666
language: en
modified: 2026-05-09T17:59:41.183671
contact point: Organization
  fn: CCSD
keyword: dom
keyword: infoeu-reposemanticsreport
keyword: infoinfo-crcomputer-science-cscryptography-and-security-cscr
keyword: infoinfo-plcomputer-science-csprogramming-languages-cspl
keyword: infoinfo-wbcomputer-science-csweb
keyword: isolation
keyword: javascript
keyword: reports
keyword: sandboxing
keyword: web-worker
landing page: https://inria.hal.science/hal-00862099

SafeJS: Hermetic Sandboxing for JavaScript
type: Distribution
format: HTML
issued: 2026-05-09T17:59:41.184995
modified: 2026-05-09T17:59:41.173621
access URL: https://inria.hal.science/hal-00862099

test_moissonnage_selune
type: Agent