Code compilation alternative to Function()

Andrea Giammarchi andrea.giammarchi at
Sun Jan 12 08:08:47 PST 2014

beside what Sean and Brendan said, I think it makes sense to ask for a
"code generator/compositor" under CSP.

Actually I never understood why CSP does not allow Function since
everything that could be done inside Function can be basically done
programmatically too (parsing manually the string or similar things even
more problematic if used).

There are few libraries based on features detection resulting in best
runtime created function able to boost up a lot (NWMatcher, lo-dash,
others) and it's a pity these might cause problems under CSP.

that being said, <troll> have you tried execScript already? </troll> :D

On Sat, Jan 11, 2014 at 10:54 PM, Brendan Eich <brendan at> wrote:

> fixplzsecrets at wrote:
>> Asm.js programs are larger than equivalent native executables
> Not on the (gzipped) wire:
> compiling-to-javascript.html
> (Emscripten has improved since then, IINM.)
> In memory, the issue isn't executable vs. JS source (asm.js or not), since
> safety is not optional. You'd do better to consider an SFI compiler (NaCl
> or PNaCl) code size than raw executable.
> Anyway, I see Sean Silva replied, so I'll stop here.
> /be
> _______________________________________________
> es-discuss mailing list
> es-discuss at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the es-discuss mailing list