title: How to run user-submitted scripts securely in a node.js sandbox?
body: <p>What are the options for running (possibly malicious) user-submitted scripts in node.js, securely?  I.e. in an environment that prevents code from accessing sensitive data and APIs?</p>
  
  <p><code>vm.runInNewContext(userScript, {})</code> is a tempting starting point... but it seems like there are <a href="https://github.com/joyent/node/issues/1469" rel="noreferrer">known issues</a> there.</p>
  
  <p>The <a href="https://github.com/gf3/sandbox" rel="noreferrer">sandbox module</a> looks interesting, but uses <code>runInNewContext()</code> as well so I'm a bit leery of it.</p>