caja

This is actually a large part of why ES5 added these things, to enable Caja and the like.

XSS: We use google-caja to mitigate XSS attacks and will introduce Content Security Policy (CSP) within a few months.

Une big example is Bankia (previously caja madrid), the president of bankia was a friend of Aznar and certainly underqualified.

Politic and President of the supervisory board of Caja Madrid, that crashes and became Bankia.

Crockford prefers his adsafe over Google's caja.

We've had several small investors scams (one of them by Caja Madrid, a big savings bank), in all the cases, the regulators were accused of being too little involved.

His last big hole was the sale of a prefered stock emission to small savers and old people(no big financial entiy bought those), to save the caja from default.

A famous case was Caja Mediterráneo, which (as we knew after the crisis started) had people like a ballet dancer in its board of directors (of course designated by politicians).

Suddenly lots of loans were being defaulted (especially loans to real estate agencies, construction companies and consumers) and a closer inspection on caja's economy revealed a lot of toxic assets (just like in the US) covering the losses from the loans to the communities.

Cowl needs sandboxing to work (either by built-in browser support, or by Caja et al), but even with a sandbox, you still need some sort of policy for when to allow data in and out of the scripts, and that's one of the main things Cowl provides.

While we loved "caja" (spanish for box) in Hebrew (we're based in Tel Aviv) it sounds like "cacha" which means "so-so" Hope this helps!

I could have had my kids here in the "Caja" (public hospital) for free, but after hearing tons of complaints and horror stories it was better to just pay a $5000-$6000 fee to the doctors and hospital in the private sector to have each of my kids born.

I think Caja definitely has the greatest potential for mainstream adoption of object-capability+event-loop systems right now, but E is still the “designed for capabilities” language for me, and so I use it for most of my personal programming (data munging, generating my packing list, interactive this-and-that, etc) when I can, so that I can feed the experience back into the design/implementation work for E.

One solution would be for Facebook to host the app, and to run its content in a sandbox (using something like Google's Caja?).

Caja is (more?) often deployed on the client side to filter Javascript.

Caja is something you can do server-side to filter JavaScript.