[RFC] 关于沙箱隔离的一点想法 #286

Activity

1. kuitos commented on Mar 5, 2020

   

   kuitos

   on Mar 5, 2020

   Member

   More actions

   不错的想法，但是这个方案问题还是很多的。
   主要是子应用的 js 里不单只有逻辑计算，还有各种副作用，比如 js 里需要对 url 做一个变更（跳转），js 里做一个弹框等等。本质上这个方案跟直接用 iframe 做嵌入是没有区别的，那 iframe 的问题你就需要再去解决了。

   👍React with 👍5Reacted by Jason Tan, rongang, Luker, neversleeppy and psychewwy
2. seanuu commented on Mar 5, 2020

   

   seanuu

   on Mar 5, 2020

   Author

   More actions

   let iframe = document.createElement('iframe');
   iframe.style.display = 'none';
   document.body.appendChild(iframe);

   let iframeWin = iframe.contentWindow;
   iframeWin.name = 'iframeWin';
   window.name = 'window';

   let iframeProxy = new Proxy(iframeWin, {
   get: function (target, propKey, receiver) {
   return Reflect.get(window, propKey, receiver);
   }
   // ...
   });

   // 子应用创建 挂载
   let appModule = function app() {
   console.log(location);
   console.log(name);

   let div = document.createElement('div');
   div.innerText = 'test';
   document.body.appendChild(div);
   
   name = 'appModule';
   console.log(window.name);
   
   setTimeout(() => {
       document.body.removeChild(div);
   }, 1000)
   

   };
   let code = (${appModule.toString()})();

   iframeProxy.eval(code);

   👍React with 👍3Reacted by Harold Davoren, psychewwy and tianwu
3. seanuu commented on Mar 5, 2020

   

   seanuu

   on Mar 5, 2020

   Author

   More actions

   检测了一下，这样操作的话在 iframe 环境运行代码，全局属性方法会从主应用window中找，设置iframe的全局属性，不会污染到主应用，设置后的全局属性在 iframe 环境也还能找到
4. seanuu commented on Mar 5, 2020

   

   seanuu

   on Mar 5, 2020

   Author

   More actions

   好像还有很多问题，无视这个想法吧
5. kuitos commented on Mar 5, 2020

   

   kuitos

   on Mar 5, 2020

   Member

   More actions

   欢迎各种方案或想法上的交流😀
6. kuitos

   closed this as completedon Mar 5, 2020
7. kvchen95 commented on Sep 7, 2022

   

   kvchen95

   on Sep 7, 2022

   More actions

   hey bro. 你的想法实现了！参见腾讯wujie前端方案

   👍React with 👍65Reacted by JinlingLiu, jameswhf, Old-ear, 舜岳, Eway, HelKyle, Edward, dutianyu, cool, love_飞影 and 55 more
8. gyk-123 commented on Apr 5, 2023

   

   gyk-123

   on Apr 5, 2023

   More actions

   solute ！
9. aique127 commented on Jun 22, 2023

   

   aique127

   on Jun 22, 2023

   More actions

   腾讯应该给你一份offer

   😄React with 😄12Reacted by Luker, humorHan, AttackXiaoJinJin, 无为小安, Derick Wellborn, Evan Liu, Le-dawn, Changpeng Ke, aibiliv, 小小WEB and 2 more
10. supuwoerc commented on Aug 2, 2023

    

    supuwoerc

    on Aug 2, 2023

    More actions

    solute ！
11. LukerSpringtree commented on Nov 14, 2023

    

    LukerSpringtree

    on Nov 14, 2023

    More actions

    cool
12. Lu-xiao-hang commented on Nov 15, 2023

    

    Lu-xiao-hang

    on Nov 15, 2023

    More actions

    good nice