How can I run user code securely in nodejs using VM without being vulnerable to attacks

Question

I'm making a nodejs project, and I want to be able to run user code safely using the vm module, but there's many vulnerabilities such as the constructor of every object/function to be used to eval js string. any way to secure it? Thanks!

I tried everything, but nothing works. I also don't want to use other packages. Thanks.

There are plenty of similar questions in this space. Though it may be very obvious to you (and to someone else after carefully reading your question), it would still be useful to others if you indicated clearly how your question differs from the others, or how their answers were insufficient for your question. Ex. 1, 2, 3, 4. That's one way you can demonstrate your on-site research effort. — rainbow.gekota
– rainbow.gekota, Commented Nov 1, 2022 at 18:14

libkush · Accepted Answer · 2022-09-11 06:21:07Z

1

There doesn't seem to be any built-in method to run untrusted code safely. I suppose if you could work with external libraries, there are a few solutions dedicated to this purpose like isolated-vm and vm2.

answered Sep 11, 2022 at 6:21

libkush

2152 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How can I run user code securely in nodejs using VM without being vulnerable to attacks

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related