Hardening Drupal with WebAssembly
wasmlabs.dev
Hardening Drupal with WebAssembly
1–10 of 52 posts
Re: Hardening Drupal with WebAssembly
#2This article explores how Drupal can benefit from the capabilities-based security model offered by WebAssembly, a portable binary format that allows execution of code in a safe and efficient manner. By deploying Drupal within a WebAssembly-based stack, it gains an additional security layer, protecting against a wide range of vulnerabilities, including those that may not be public yet but can be preemptively mitigated through these mechanisms.
Re: Hardening Drupal with WebAssembly
#3This article explores how Drupal can benefit from the capabilities-based security model offered by WebAssembly, a portable binary format that allows execution of code in a safe and efficient manner. By deploying Drupal within a WebAssembly-based stack, it gains an additional security layer, protecting against a wide range of vulnerabilities, including those that may not be public yet but can be preemptively mitigated…
> capabilities-based security model offered by WebAssembly
What? Since when does WebAssembly natively ship with a "capabilities-based security model"?
> protecting against a wide range of vulnerabilities, including those that may not be public yet but can be preemptively mitigated through these mechanisms
Not yet public vulnerabilities?
Who was this article/summary written by? Reeks of GPT or at least someone who doesn't actually know the subject very well.
Re: Hardening Drupal with WebAssembly
#4No outgoing http requests, no ability to connect to an external database such as mysql- only SQLite is used.
No explanation for what vulnerabilities standard Drupal is actually being hardened against.
Re: Hardening Drupal with WebAssembly
#5No outgoing http requests, no ability to connect to an external database such as mysql- only SQLite is used. No explanation for what vulnerabilities standard Drupal is actually being hardened against.
> No explanation for what vulnerabilities standard Drupal is actually being hardened against.
But... Are you not afraid of these unknown, not-yet-public vulnerabilities that this solution clearly protects us against?!
Re: Hardening Drupal with WebAssembly
#6That article doesn't explain what the WASM code does in Drupal.
Re: Hardening Drupal with WebAssembly
#7That article doesn't explain what the WASM code does in Drupal.
I understood that Drupal/php is compiled to WASM and then run on a WASM runtime.
So no WASM inside Drupal, but Drupal run as, and in WASM.
Re: Hardening Drupal with WebAssembly
#8That article doesn't explain what the WASM code does in Drupal.
I understood that Drupal/php is compiled to WASM and then run on a WASM runtime. So no WASM inside Drupal, but Drupal run as, and in WASM.
Exactly. The Drupal code is unmodified and runs on top of the PHP interpreter compiled to Wasm [0]. The Drupal PHP code is not compiled to Wasm.
- [0] https://github.com/vmware-labs/webassembly-language-runtimes
Re: Hardening Drupal with WebAssembly
#9The article claims NASA use Drupal, which was quick to verify as true, but NASA also uses Django, or at least the Django project still claims they do.
Why on earth are they using both?
Re: Hardening Drupal with WebAssembly
#10No outgoing http requests, no ability to connect to an external database such as mysql- only SQLite is used. No explanation for what vulnerabilities standard Drupal is actually being hardened against.
Take a look at the linked article about how some PHP vulnerabilities can be mitigated with WebAssembly: https://wasmlabs.dev/articles/mitigating-php-vulnerabilities...