GraalVM JavaScript Sandboxing
Summary
Official GraalVM documentation detailing sandboxing policies (TRUSTED, CONSTRAINED, ISOLATED, UNTRUSTED) for running guest languages via the Polyglot API. It covers security boundaries, resource limits (CPU time, memory, I/O), host access restrictions, and guidance on when and how to apply isolation across guest code.