sandboxing

2 posts

Your dependencies can read your environment variables. JavaScript lets them.

Ambient authority means any code in your Node.js process can touch the filesystem, network, and environment.

A single compromised transitive dependency can exfiltrate your , write to your filesystem, and open outbound connections. It does not need a vulnerability in…

June 28, 2026

capability-based-security rust cap-std sandboxing

Your dependencies can read any file on disk. cap-std makes them ask permission.

Rust's standard library grants ambient filesystem authority to every dependency.

Any crate in your dependency tree can open , write to your directory, or enumerate every file in your project. Rust's standard library does not ask for…

June 26, 2026