0
votes
1answer
101 views

What are security advantages of Google Caja over using the web worker API? [closed]

I am currently looking into Google Caja to run user-supplied JS code in the browser and in Node. So far, I understand, that, in a browser context, "cajoled code" disallows reading and messing with ...
2
votes
1answer
928 views

Why hasn't Caja been popular? [closed]

Google released Caja around 2008(Capability JavaScript). It is still mainly a laboratory language. But XSS and other attacks would be prevented if there was widespread integration of Caja.
4
votes
2answers
4k views

Why is Google blocking users from accessing their local file system in Chromium? [closed]

The question is based on this issue in Chromium. It is marked as Won't Fix. Do you see any reason to block a local html file from accessing another local html file located in the same folder?