26 lines
797 B
TypeScript
26 lines
797 B
TypeScript
import { Sandbox } from "../sandbox.ts";
|
|
import { Plug } from "../plug.ts";
|
|
|
|
// Uses Deno's permissions to lock the worker down significantly
|
|
export function createSandbox<HookT>(plug: Plug<HookT>): Sandbox<HookT> {
|
|
return new Sandbox(plug, {
|
|
deno: {
|
|
permissions: {
|
|
// Disallow network access
|
|
net: false,
|
|
// This is required for console logging to work, apparently?
|
|
env: true,
|
|
// No talking to native code
|
|
ffi: false,
|
|
// No invocation of shell commands
|
|
run: false,
|
|
// No read access to the file system
|
|
read: false,
|
|
// No write access to the file system
|
|
write: false,
|
|
},
|
|
},
|
|
// Have to do this because the "deno" option is not standard and doesn't typecheck yet
|
|
} as any);
|
|
}
|