This task involves the work of testing the sandboxed Graph extension (T222807: Sandbox Graph extension into an iframe) on the beta cluster.
Doing so, we think, will afford volunteers the space they need to:
- Experiment with, and subsequently, become familiar with the sandboxed approach
- Identify adjustments that may make the extension more robust
- Learn how current graphs may need to be updated to be compatible with the sandboxing approach
Open questions
- 1. What value could lie in investing in enabling volunteers to sandbox arbitrary Javascript?
- It would make it easier to look for security holes in the sandboxing approach: you wouldn't have to find a security hole in the sandboxing and in Vega at the same time to demonstrate an exploit. via T346292#9165470
- 2. Will we prioritize implementing what "1." describes now?