# Sandboxing landscape

DevFeed: [Sandboxing landscape](<https://devfeed.tech/articles/sandboxing-landscape-38962.md>)

Original publisher: [Read original article](<https://idea.popcount.org/2017-03-28-sandboxing-landscape>)

Author: Marek

Published: 2017-03-27T22:00:00Z

Content type: article

Language: en

Sources: [Marek Majkowski](<https://devfeed.tech/sources/marek-majkowski.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [virtualization](<https://devfeed.tech/topics/virtualization.md>), [Programming language](<https://devfeed.tech/topics/programming-language.md>), [Process](<https://devfeed.tech/topics/process.md>)

Tags: [isolation](<https://devfeed.tech/tags/isolation.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [lua](<https://devfeed.tech/tags/lua.md>), [multi-tenancy](<https://devfeed.tech/tags/multi-tenancy.md>), [sandboxing](<https://devfeed.tech/tags/sandboxing.md>), [shouldn-t](<https://devfeed.tech/tags/shouldn-t.md>), [virtualization](<https://devfeed.tech/tags/virtualization.md>)

## AI overview

This article surveys four approaches to isolating untrusted third-party code: programming-language runtimes, operating-system processes, software fault isolation, and virtual machines. It discusses requirements such as multi-tenancy, scheduling, memory limits, and restricting privileged operations, then examines Lua and JavaScript as examples.

## Source excerpt

Sandboxing landscape Some time ago I started wondering - would it be possible for a CDN to run customer code on the edge servers? I read and asked around, over time I got acquainted to what is and what is not technically possible. But that didn't bring me closer to an useful answer. Fortunately exploring this subject has been enormous fun. In this blog post I'll describe my findings so far.