Product
Introducing SSO
Streamline your login process and enhance security by enabling Single Sign-On (SSO) on the Socket platform, now available for all customers on the Enterprise plan, supporting 20+ identity providers.
alcatraz
Advanced tools
Readme
Alcatraz is high-security prison for your application code. It does this by wrapping your front-end code in an extra closure that can terminate hostile scripts by nuking global variables or introducing them in to the local scope and there for overriding them.
The primary objective of this module was to ensure that code can run safely
within an iframe
element in the browser without requiring any code rewriting.
To see it's use for iframe sandboxing, please take a look at:
https://github.com/3rd-Eden/containerization
Current alcatraz does:
document.domain
.console
objectTo create a new prison for your code you need to require the alcatraz
module.
var Alcatraz = require('alcatraz');
The Alcatraz
constructor allows 3 arguments:
method
a string of the global function name that is used to communicate
with the jail.source
the actual code that needs to be locked down, this assumes a string.domain
this sets the document.domain
to allow cross domain communication
if needed. If no argument is give, it defaults to the current
document.domain
.To sandbox the code simply toString
your alcatraz instance.
var prison = new Alcatraz('myglobalfn', fs.readFileSync('index.js', 'utf-8'));
console.log(prison.toString());
The wrapped code communicates with the given method using a simple object based protocol.
{ type: ping } // send a ping packet
{ type: load } // the load event fired
{ type: error } // critical javascript error
{ scope: 'window.onerror' } // the error has a scope, to trace back the origin
{ args: [] } // the arguments the error received
{ type: console } // console method was accessed
{ attach: boolean } // was a logging/debuggin method
{ scope: method } // method name used
{ args: [] } // arguments of the console
MIT
FAQs
A high-security prison for your application code
The npm package alcatraz receives a total of 6 weekly downloads. As such, alcatraz popularity was classified as not popular.
We found that alcatraz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Streamline your login process and enhance security by enabling Single Sign-On (SSO) on the Socket platform, now available for all customers on the Enterprise plan, supporting 20+ identity providers.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.