Servo uses mozjs which is just rust bindings for SpiderMonkey which is still C++.All this effort to use rust and yet they would not rewrite the JS engine which is the biggest attack surface for memory vulns.
there is active work to make the js engine more pluggable <a href="https://github.com/servo/servo/issues/40600" rel="nofollow">https://github.com/servo/servo/issues/40600 (and safety work)<a href="https://servo.org/blog/2024/04/15/spidermonkey/" rel="nofollow">https://servo.org/blog/2024/04/15/spidermonkey/<a href="https://github.com/servo/servo/wiki/Servo-and-SpiderMonkey-Report" rel="nofollow">https://github.com/servo/servo/wiki/Servo-and-SpiderMonkey-R...the monthly updates always mention their refactoring work on the script crate
computersuck · · focus · HN ↗
All this effort to use rust and yet they would not rewrite the JS engine which is the biggest attack surface for memory vulns.
throawayonthe · · focus · HN ↗
<a href="https://servo.org/blog/2024/04/15/spidermonkey/" rel="nofollow">https://servo.org/blog/2024/04/15/spidermonkey/
<a href="https://github.com/servo/servo/wiki/Servo-and-SpiderMonkey-Report" rel="nofollow">https://github.com/servo/servo/wiki/Servo-and-SpiderMonkey-R...
the monthly updates always mention their refactoring work on the script crate