SECURITY
With sandboxed plugins,
the design limits the spread of damage.
EmDash's sandboxed plugins run additional features in an environment separate from the core CMS. This "isolation of the execution environment" combined with "permission control" that allows only necessary operations helps limit the impact when problems occur.
- Read articles allowed
- Rewrite articles not allowed
- Connect to external services specified destinations only
Note: Native plugins run in the same environment as the CMS core, so this isolation does not apply to them. It does not protect against vulnerabilities in the CMS core or execution environment, or against malfunctions within the permitted scope.
Isolated execution on Workers requires a Paid plan and additional configuration.
Official execution requirements