ses

import { lockdown, Compartment, harden } from 'ses'; // Step 1: Lock down the global environment to prevent tampering. // This should be done as early as possible in your application's lifecycle. lockdown(); console.log('Global environment locked down.'); // Step 2: Create a new Compartment for secure execution of untrusted code. // Compartments are isolated and by default have no ambient authority (e.g., no `fetch`). const untrustedCompartment = new Compartment({ globals: { // Grant specific global capabilities to the compartment. log: harden(console.log), greet: harden((name: string) => `Hello, ${name} from compartment!\n`), }, }); // Step 3: Evaluate untrusted code within the compartment. // The code only has access to its explicit globals and hardened intrinsics. const untrustedCode = ` try { log(greet('World')); // Attempting to access unauthorized globals will fail. // console.error('This should not be accessible.'); // new Function('return this')().alert('Attempted to access window!'); log('Attempting to modify Object.prototype...'); Object.prototype.evil = 'muahaha'; // This will fail due to lockdown } catch (e: any) { log('Caught expected error: ' + e.message); } const func = new Function('return 1 + 1;'); // This will throw after lockdown `; try { untrustedCompartment.evaluate(untrustedCode); } catch (e: any) { console.error('Error evaluating untrusted code:', e.message); } // Verify global prototype pollution did not occur in the main realm if (Object.prototype.hasOwnProperty('evil')) { console.error('Prototype pollution detected in main realm!'); } else { console.log('Main realm is still secure.'); }