RUNNING UNTRUSTED JAVASCRIPT CODE

Summary from the TLDR Web Dev newsletter

Running untrusted JavaScript code within an application can open up a world of customization but also exposes the platform to security risks. There are various methods to mitigate these risks, including time-boxing execution with Web Workers, disallowing global objects, and using isolated virtual machines. Developers can also opt for server-side options like Docker or WebAssembly.