node-vm2 0.1.0

A binding to Node.js + vm2, helps you execute JavaScript safely.

A Python 3 to Node.js + vm2 binding, helps you execute JavaScript safely.

vm2

vm2 is a node module to create real sandbox in node. The official node API vm just create isolate scope and doesn’t prevent harmful code to damage your computer.

How it works

This module will launch a Node.js REPL server, which use JSON to communicate. All JavaScript code are encoded in JSON and sent to the server, after server executed the code in vm2, it reponse the result and let the module decode it back to Python values.

Install

You need Node.js.

https://nodejs.org/

Install node_vm2 from pypi wheel.

pip install node_vm2

Also make sure you have node executable in PATH, or you can specify the executable with environment variable NODE_EXECUTABLE.

Additionally, you will need npm to build node_vm2 from source.

Usage

Most of the APIs are compatible with vm2.

from node_vm2 import VM

with VM() as vm:
   result = vm.run("""
      var sum = 0, i;
      for (i = 0; i < 10; i++) sum += i;
      sum;
   """)
   print(result)

API reference

http://node-vm2.readthedocs.io/

Changelog

• 0.1.0 (Mar 23, 2017)

  • First release