kriskowal

• SES, the Hardened JavaScript shim https://github.com/endojs/endo/tree/master/packages/ses

• TC39 Compartments Proposal https://github.com/tc39/proposal-compartments

• Slides for “Dear Google, Let’s Harden JavaScript” https://kriskowal.com/dear-google-hardened-javascript.pdf

kriskowal

kriskowal

import { makeStream, nullQueue } from '@endo/stream';

/**
 * @template TValue
 */
const makePubSub = () => {
  // Request pubsub async queue internals
  let { promise: tailPromise, resolve: tailResolve } = makePromiseKit();

kriskowal

import { makeStream, nullQueue } from '@endo/stream';

/**
 * @template TValue
 */
const makePubSub = () => {
  // Request pubsub async queue internals
  let { promise: tailPromise, resolve: tailResolve } = makePromiseKit();

kriskowal

const makeNearReader = reader =>
  Far('Reader', {
    async next() {
      const iteration = await reader.next();
      if (iteration.done) {
        return iteration;
      }
      return harden({ value: encodeBase64(iteration.value) });
    },
    async return(value) {

kriskowal

{
  "colors": {
    "darkBlue": "#61B2E4",
    "darkRed": "#D22F27",
    "darkGreen": "#5C9E31",
    "lightPurple": "#B399C8"
  },
  "levels": [
    {
      "topology": "torus",

kriskowal

/**
 * @template T
 * @typedef {object} Schema
 * @prop {() => T} number
 * @prop {() => T} boolean
 * @prop {() => T} string
 * @prop {(t: T) => T} optional
 * @prop {(t: T) => T} list
 * @prop {(t: T) => T} dict
 * @prop {(shape: Record<string, T>) => T} struct

kriskowal

{
  "colors": {
    "lightBlue": "#92D3F5",
    "darkBlue": "#61B2E4",
    "lightRed": "#EA5A47",
    "darkRed": "#D22F27",
    "lightGreen": "#B14CC3",
    "darkGreen": "#5C9E31",
    "lightYellow": "#FCEA2B",
    "darkYellow": "#F1B31C",

kriskowal

Module Harmony Dependency Graph

graph LR;

subgraph Compartments Layer 0

  ModuleSourceConcept[module source concept];

  ModuleSourceInstance[ModuleSource instance];

kriskowal

// So, in sloppy mode, eval and var can do interesting things.

globalThis.name = 'global';
console.log(name === 'global');

(function () {
  const name = 'outer';

  // direct eval, using a var declaration.
  (function () {