一句话:提出 JSISOLATE,一种轻量级浏览器内 JavaScript 隔离机制,避免第三方脚本间全局变量冲突等相互干扰。
现代 Web 应用常从外部主机引入第三方脚本,以复用代码并增强功能。但浏览器中所有脚本共享同一执行环境,同时执行可能产生意外影响,例如多个脚本定义同名全局变量,导致实际取值不可预测,客户端 JavaScript 代码的可靠性因此受损。JSISOLATE 旨在提供一种轻量级的浏览器内 JavaScript 隔离方案,使不同脚本的执行相互隔离,从而避免这类全局命名冲突和意外干扰。摘要未报告具体隔离机制、实现代价或实验评估结果。
Modern web applications commonly include third-party scripts from external hosts. While enabling code reuse and enhancing the functionalities, the reliability of client-side JavaScript code can be impaired by the inclusion of other scripts. Since all scripts run in the same execution environment in the browser, executing them all together may cause unexpected effects. For example, global variables with the same name might be defined by multiple scripts, causing the actual value to be unpredictable.
DOI 原文 ·
@inproceedings{paperbot6386,
title = {JSISOLATE: lightweight in-browser JavaScript isolation},
author = {Mingxue Zhang and Wei Meng},
booktitle = {FSE},
year = {2021},
doi = {10.1145/3468264.3468577}
}