3 个仓库
Awesome GitHub RepositoriesRuntime Access Controls
Controls that restrict or permit script access to the host's underlying language runtime and system APIs.
Distinct from Security and Access Control: Distinct from Security and Access Control by focusing on the toggleable bridge between the script engine and the host CLR.
Explore 3 awesome GitHub repositories matching security & cryptography · Runtime Access Controls. Refine with filters or upvote what's useful.
Awesome Runtime Access Controls GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- sebastienros/jint
sebastienros/jint
4,653在 GitHub 上查看Jint is a JavaScript interpreter for the .NET ecosystem that executes code without requiring a browser or Node.js environment. It is an ECMAScript compliant engine that provides a sandboxed scripting runtime with configurable limits on memory and time to run untrusted code. The engine features a native object bridge that exposes .NET classes and methods to JavaScript scripts for bidirectional data exchange. To reduce overhead during repeated executions, it utilizes a precompiled script cache to store parsed JavaScript in memory. The project covers asynchronous script execution and promise ha
Toggles the ability for scripts to access the common language runtime to maintain a secure sandbox.
C# - scriban/scriban
scriban/scriban
3,905在 GitHub 上查看Scriban 是一个用于动态文本生成的文本模板库和 .NET 脚本引擎。它既是一个模板处理器，也是一个安全的脚本沙箱，通过限制对象暴露来提供安全的执行环境，从而防止未经授权的代码执行。该项目还包含一个抽象语法树模板解析器，支持对模板进行程序化分析和修改。 该引擎内置了专门的 Liquid 模板引擎及兼容模式，能够解析、执行并转换以 Liquid 语法编写的模板。其独特之处在于成员暴露过滤系统，允许开发者重命名、隐藏或过滤对象属性，从而控制模板内的数据访问方式。 该库涵盖了广泛的功能，包括异步模板渲染、条件逻辑和集合迭代。它提供了用于数据操作的内置工具，如数学运算、JSON 转换、日期时间算术，以及基于正则表达式的强大文本处理功能。开发者还可以通过定义自定义函数和集成外部类来进一步扩展引擎功能。 该项目提供了一个安全的 API 接口，支持通过 Native AOT 发布为原生二进制文件。
Controls which properties and methods are accessible within the sandbox for safe evaluation.
C#handlebarsliquidmustache - opencontainers/runtime-spec
opencontainers/runtime-spec
3,641在 GitHub 上查看The project provides an open container runtime specification and standardized schema for defining container configurations, namespaces, resource limits, security policies, and filesystem mounts across platforms. It outlines the formal configuration formats, lifecycle operations, and execution environments necessary for portable, isolated container workloads. The specification covers container lifecycle management protocols and structured rules governing container creation, execution startup, process signaling, state tracking, and resource teardown. It standardizes local bundle packaging and
Applies security profiles using kernel isolation modules to restrict container actions.
Gocontainersdockeroci
