How to permit standard unshared magic powers, like WeakRef or Atomics?

[michaelfig]

[updated by @kriskowal 2024-01-09]

Document how to permit powerful globals like WeakRef or Atomics.

---

[original by @michaelfig 2021-06-18]

@erights wrote in: Agoric/agoric-sdk#3171 (comment)

Given

endo/packages/ses/src/whitelist.js

Line 1151 in 479a3ca

Atomics: false, // UNSAFE and suppressed.

it is extremely distressing that you found Atomics in scope. The false in that whitelist entry should have caused that global to be silently removed.

Likewise with

endo/packages/ses/src/whitelist.js

Line 1112 in 479a3ca

SharedArrayBuffer: false, // UNSAFE and purposely suppressed.

vs your use of SharedArrayBuffer in test-trap.js

Attn @kriskowal

It looks like the whitelisting process doesn't actually censor properties of the globalThis, as documented in https://github.com/endojs/endo/blob/master/packages/ses/src/whitelist-intrinsics.js#L254

Is that by design, or something ominous?

[kriskowal]

This is by design. SES init and lockdown make these inaccessible from within child compartments but leave them intact in the start compartment as a basis for constructing or delegating powers.

[kriskowal]

@erights Is this issue valid?

[erights]

@erights Is this issue valid?

I changed the title to reflect the valid remaining concern