Is it safe to use Deno as a javascript/typescript sandbox?

[BlueBeret]

A program run with Deno has no access to sensitive APIs, such as file system access, network connectivity, or environment access.

Does this mean it is safe to use deno as a typescript sandbox to execute untrusted user code?

[zing-rsa]

what do you mean by a typescript sandbox? like a hosted sandbox on a web interface, or just a local tool for running scripts etc?

[BlueBeret]

I want to execute untrusted user code in AWS Lambda. Using Node.js with the vm module isn't enough because users can bypass it using process.binding. So, I was wondering whether Deno would be a more secure alternative.

[BlackAsLight]

Run the code in a worker and you can just do delete globalThis.Deno for example on any API you don't want them to use, before their code runs.

[jupegarnica]

deno run --no-prompt untrusted.js will deny all sensitive operations throwing an error