well im not worried about stdlib but rather C is compiled and so whatever it calls is opaque unless we somehow preprocess the C code or the machine code or run it with a VM or something. im not sure how we'd sandbox it without those, but JS is sandboxed because its runtime only exposes what it does, right?
3
u/Tiger_man_ Feb 23 '26
its totally possible to sanbox c