Ask HN: Pros and cons of V8 isolates?
Answering the security question specifically: v8 is a runtime and not a security boundary. Escaping it isn't trivial, but it is common [1]. You should still wrap it in a proper security boundary like gVisor [2].<p>The security claims from Cloudflare are quite bold for a piece of software that was not written to do what they are using it for. To steal an old saying, anyone can develop a system so secure they can't think of a way to defeat it.<p>1. <a href="https://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-17734/Google-V8.html" rel="nofollow">https://www.cvedetails.com/vulnerability-list/vendor_id-1224...</a><p>2. <a href="https://gvisor.dev/" rel="nofollow">https://gvisor.dev/</a>