Eval untrusted JS in an AudioWorklet inside an unpriviledged iframe.

npm i sandbox-worklet

pnpm add sandbox-worklet

yarn add sandbox-worklet

# SandboxNode

# constructor(context)

# new SandboxNode()

SandboxNode

# context

BaseAudioContext

# rpc

Rpc

# eval(code)
# code

string

eval(code)  =>

any

# create(context)

# context

BaseAudioContext

create(context)  =>

Promise<SandboxNode>

# register(context)

# context

BaseAudioContext

register(context)  =>

Promise<void>

# Sandbox

{

# destroy

# ()
()  =>

void

# eval

# (code)
# code

string

(code)  =>

Promise<any>

# ondestroy

# ()
()  =>

void

}

# createSandbox()

createSandbox()  =>

Promise<Sandbox>

• rpc-mini by stagas – A mini RPC for MessagePort interfaces.

Fork or edit and submit a PR.

All contributions are welcome!

MIT © 2022 stagas