Applying Hardened JavaScript to supply chain security for a proactive approach

by Zbyszek Tenerowicz.
The problem of supply chain security for the Web is currently being addressed by building up databases of known issues and improving the pace at which research and testing results are delivered to web developers. Hardened JavaScript provides another layer of protection that can be proactive, not reactive. The TC39 Compartment proposal would enable code to only allow other code access to expected globals and imports, but open questions remain.