Make a secure mode

[HolyOne]

Hello, I want user to run QB in my website.

But I dont want it to reach DOM
Also including files should be optional when executing the code. (for security and other reasons, like the code may break if the remote included file goes missing)

Can you add a parameter for these?

[boxgaming]

Thanks for the suggestion. This is a very interesting concept. So, the use case is that you want to include QBJS on a page on your site where visitors can change and execute the code samples?

If you are planning embedding the QBJS IDE from qbjs.org in an iframe on your site, the standard browser security rules will prevent that frame from being able to modify content on the parent page.

In addition to the DOM functions a potential secure mode would probably also need to disable the ability to use the $If Javascript metacommand to include native JS code.

[HolyOne]

what i had in mind was my visitors can showcase their own qb codes on my website. But i fear they can easily inject cookie capturing code, alerts, writing outside the allowed div etc..