RunJS (runjs.in) is a modern, privacy-first, client-side web development utility, playground, and learning environment. Unlike traditional online sandboxes that send your source code to remote servers ...

title Handlebars (41.5M weekly downloads): the March AST validation is bypassed, so an object passed to compile() still runs attacker JavaScript (CVE-2026-106446, 9.8), and the prototype deny list ...