<p dir="auto">Deno provides a lot of useful objects in the runtime. It is also great to see a project that is solving many of the security problems of running JavaScript.</p>
<p dir="auto">I'd like to lock things down even further so that I can use Deno for hermetic config generation.</p>
<p dir="auto">Are there plans to offer something like the vm module available in node or some other way to provide a smaller environment (i.e. no Deno.pid etc etc)?</p>
<div class="highlight highlight-source-js notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="const blob_src = new Blob(['console.log(&quot;Worker from BLOB&quot;)'])

new Worker(URL.createObjectURL(blob_src), {type:'module'})"><pre class="notranslate"><span class="pl-k">const</span> <span class="pl-s1">blob_src</span> <span class="pl-c1">=</span> <span class="pl-k">new</span> <span class="pl-v">Blob</span><span class="pl-kos">(</span><span class="pl-kos">[</span><span class="pl-s">'console.log("Worker from BLOB")'</span><span class="pl-kos">]</span><span class="pl-kos">)</span>

<span class="pl-k">new</span> <span class="pl-v">Worker</span><span class="pl-kos">(</span><span class="pl-c1">URL</span><span class="pl-kos">.</span><span class="pl-en">createObjectURL</span><span class="pl-kos">(</span><span class="pl-s1">blob_src</span><span class="pl-kos">)</span><span class="pl-kos">,</span> <span class="pl-kos">{</span><span class="pl-c1">type</span>:<span class="pl-s">'module'</span><span class="pl-kos">}</span><span class="pl-kos">)</span></pre></div>
<p dir="auto">On <code class="notranslate">deno 1.0.1  v8 8.4.300  typescript 3.9.2</code> results in the following unsupported scheme error:</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="error: Uncaught Error: Unsupported scheme &quot;blob&quot; for module &quot;blob:http://deno-opaque-origin/953cec0c-2344-4c5b-89ee-c9e7b4de975e&quot;. Supported schemes: [
    &quot;http&quot;,
    &quot;https&quot;,
    &quot;file&quot;,
]

"><pre class="notranslate"><code class="notranslate">error: Uncaught Error: Unsupported scheme "blob" for module "blob:http://deno-opaque-origin/953cec0c-2344-4c5b-89ee-c9e7b4de975e". Supported schemes: [
    "http",
    "https",
    "file",
]


</code></pre></div>
<p dir="auto">Workers from Blob URLs is expected to work from what I see in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="476616326" data-permission-text="Title is private" data-url="https://github.com/denoland/deno/issues/2726" data-hovercard-type="issue" data-hovercard-url="/denoland/deno/issues/2726/hovercard" href="https://github.com/denoland/deno/issues/2726">#2726</a> and <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="477022205" data-permission-text="Title is private" data-url="https://github.com/denoland/deno/issues/2729" data-hovercard-type="pull_request" data-hovercard-url="/denoland/deno/pull/2729/hovercard" href="https://github.com/denoland/deno/pull/2729">#2729</a>.</p>
<p dir="auto">Can the <code class="notranslate">"blob"</code> and <code class="notranslate">"data"</code> schemes be whitelisted for Deno Workers?</p>