Teru's blog

Caja

The Shindig page mentioned Caja, which enhances Javascript security.

• Introduction: http://code.google.com/p/google-caja/wiki/CajaEasyIntro,
• google-caja: http://code.google.com/p/google-caja/,
• Getting started: http://code.google.com/p/google-caja/wiki/GettingStarted.

Google-caja is a source-to-source translator for securing Javascript-based web content. OK, shall I install it? Wait... it might be better for me to first see how Caja works by using it untranslated as a library. Let me think...

Skipping around some pages of google caja wiki, I learned so far the following:

1. Caja is a library to enhance security of JavaScript.
2. Caja modules are created by "cajoling".
3. Cajoling is to turn an OpenSocial gadget specification into a Caja module.
4. Hosting Caja modules is explained at this link.

I figure I'd better find a good OpenSocial example first before trying Caja.