Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.

Google released Caja around 2008(Capability JavaScript). It is still mainly a laboratory language. But XSS and other attacks would be prevented if there was widespread integration of Caja.

share|improve this question

closed as primarily opinion-based by MichaelT, BЈовић, Kilian Foth, GlenH7, Martijn Pieters Jul 29 '13 at 12:02

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

    
why downvotes? please say –  Ada May 3 '12 at 0:50
    
I'm sure that the, "More wood behind fewer arrows" policy (googleblog.blogspot.com/2011/07/…) is not helping. Caja doesn't have anything to do with "social" (blogs.msdn.com/b/jw_on_tech/archive/2012/03/13/…) –  Stargazer712 May 3 '12 at 3:16
add comment

1 Answer

up vote 11 down vote accepted

I am the technical lead for Caja. Since it's initial release, we've been iterating on the design and implementation of Caja. With each iteration we've made the input we accept as input larger (and closer to plain-old-javascript), and our output faster and more debuggable. During our testing we found that the lack of these features made adoption by developers difficult.

Our current iteration is based on ES5-strict support in modern browsers and executes at full speed and with a sufficiently simple translation as to be negligible during debugging. We're not quite done with all the features of the new version but you can try it out experimentally at http://caja.appspot.com/?es5=true . We expect our modern version of Caja to see a lot greater adoption.

We will continue to support older browsers with our existing server-side translation version and existing sites can start using it today and start getting the modern version based on the version of the browser soon. For example, Google Sites uses Caja to sandbox HTML Box in this way.

For more information on how to embed content using Caja, see https://developers.google.com/caja

share|improve this answer
    
Thank You very Much Jasvir. I really appreciate it. –  Ada May 5 '12 at 21:52
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.