Sandbox-first language
I was thinking about this for more than one year now.
It is time to give it a shot and create brand new scripting language that is secure by default.
What security means in this context?
- capbalities for io, networking etc.
- safe to run untrusted code
- memory limits and fuel backed into runtime
- embeddable into server environments allowing user scripting
- allow injecting host functions into the runtime
The main goal is to have runtime and allow user scripting without relying on OS APIs.
Every single general-purpose programming language assume that code is written by trusted programmer.
If it was easy to turn any programming language into safe one, this page wouldn't exist.
Why not WASM?
WASM is promising runtime and combined with WASI, it should be useful for sandboxing other programming languages.
But using WASM prevents to see what would be possible if langauge itself was built with sandboxing in mind from day 1.