ServerJS/Modules/Secure: Difference between revisions
Jump to navigation
Jump to search
(Moved the security requirements Ihab and I drafted to a sub-page.) |
(No difference)
|
Revision as of 21:03, 1 March 2009
To be usable in secured module loaders, a module must conform to additional constraints:
- A module must not write to any free variables or their transitive members.
- A module must not refer to any free variables apart from primordials ("Object", "Array", etc. as defined by ECMAScript), "require", "environment", and "exports".
- A module must not tamper with (assign to, assign to members of, delete, or otherwise mutate) the transitive primordials, the "require" object, any object returned by "require", or the transitive "environment".