Discontinued do to security issues without proper fixes.
[fix] Fix resolver issue.
[fix] Multiple security fixes.
[new] Add resolver API to create a shared resolver for multiple NodeVM
instances allowing to cache scripts and increase sandbox startup times.
[new] Allow to pass a function to require.context
which is called with the filename allowing to specify the context pre file.
[fix] Multiple security fixes.
[fix] Security fix (see #516).
[fix] Security fix (see #515).
[new] Support conditional export resolution with custom resolver. (nick-klaviyo)
[fix] Fix typescript errors in index.d.ts
[new] Add file system API.
[fix] Fix parsing error with object pattern in catch clause.
[new] Add option require.strict
to allow to load required modules in non strict mode.
[fix] Security fix.
[new] Add uptime to process.
[fix] Security fix.
[fix] Fix inspection with showProxy.
[fix] Bump parser ECMA version to 2022.
[fix] Add function type check for arguments, caller, and callee property check (GeoffRen)
[fix] Fix find best extension handler
[fix] Allow relative require from base script
[fix] Fix issue with modules with exports clause in package JSON
[fix] Added missing whitelist check before custom require
[fix] Revert plain object toString behavior
[fix] Root path check improved
[fix] Security fixes (XmiliaH)
[new] Editor config (aubelsb2)
[fix] Fix for Promise.then breaking
[fix] Fix for missing properties on CallSite
[new] Added strict option
[fix] Security fixes (XmiliaH)
[fix] Fixed bound function causes TypeError (XmiliaH)
[fix] Allow extending of frozen objects
[fix] Security fixes
[fix] Fixed problems when Promise object is deleted (XmiliaH)
[fix] Fixed oversight that write ability can change on non configurable properties (XmiliaH)
[fix] Support shebang as node does (XmiliaH)
[fix] Property typos (Shigma)
[new] Added NodeVM options to pass argv & env to process object (XmiliaH)
[fix] Fixed breakouts in NodeVM (XmiliaH)
[fix] Made async check more robust (XmiliaH)
[fix] Require helpers statically in main (XmiliaH)
[fix] Fix for non-configurable property access (XmiliaH)
[new] Added vm.Script lineOffset
and columnOffset
options (azu)
[new] Allow to specify a compiler per VMScript (XmiliaH)
[new] Add option to disable async (XmiliaH)
[new] Added allot of jsdoc (XmiliaH)
[fix] Fix access to frozen or unconfigurable properties (XmiliaH)
[fix] Double wrap Objects to prevent breakout via inspect (XmiliaH)
[fix] Compile now compiles VM code (XmiliaH)
[fix] Do not allow precompiling VMScript (XmiliaH)
[fix] Security fixes (XmiliaH)
[fix] Security fixes
[fix] toString() on builtin objects
[fix] Module resolver fixes
[fix] require('events') works correctly in Node 12
[fix] SyntaxError not being instanceOf Error
[new] Allow prohibiting access to eval/wasm in sandbox context
[new] Allow transitive external dependencies in sandbox context (Idan Attias)
[new] Allow using wildcards in module-names passed using the external attribute (Harel Moshe)
[fix] Default to index.js when specified "main" does not exist (Harel Moshe)
[fix] Security fixes
[new] Add require.resolve (Idan Attias)
[new] Support multiple root paths (Idan Attias)
[fix] Contextification of EvalError and URIError
[fix] Security fixes
[fix] Add missing console.debug function in NodeVM
[fix] Security fixes
[fix] Security fixes
[fix] Security fixes
[fix] Security fixes
[fix] Security fixes
[fix] Security fixes
[fix] Added new to vmwerror when trying to load coffeescipt but can't (dotconnor)
[fix] Add arguments to process.nextTick proxy (Patrick Engström)
[fix] Security fixes
[fix] Security fixes
[fix] Security fixes
[new] Support for custom source extensions
[new] WIP support for disallowing Promise
[fix] Prevent slow unsafe alloc for Buffers
[fix] Refactors around defaults
[fix] Types definition update
[fix] Prevent slow unsafe alloc for Buffers
[fix] Prevent unsafe alloc for Buffers
[new] Allow a custom compiler to receive the filetype (Orta Therox)
[new] Allow in-sandbox requires to also get called through the compiler (Orta Therox)
[new] Support whitelisting modules inside a VM (Orta Therox)
[new] Add TypeScript definition (Orta Therox)
[new] Added experimental VM.protect method
[new] Added VM.freeze method
[new] Added support for pre-compiled scripts via VMScript
[new] Added option wrapper (Alizain Feerasta)
Initial release