Servo uses mozjs which is just rust bindings for SpiderMonkey which is still C++.

All this effort to use rust and yet they would not rewrite the JS engine which is the biggest attack surface for memory vulns.

▲

chiffaa 2 hours ago | parent | next [-]

Setting aside the fact that using Rust for a JIT won't help that much - a new JS engine is a huge undertaking, especially if the goal is to compete with V8. They could eventually switch to Boa[1] if they wanted more safety, but it's still ways off and doesn't seem necessary enough just yet

Also, isn't the goal of Servo to effectively compete with CEF first and foremost? Because you don't need memory safety for that really

▲

alex_duf an hour ago | parent | prev | next [-]

One thing at a time, it looks like implementing a rendering engine from scratch is already enough work for 20 years. First make it work, then make it better.

▲

skybrian 5 hours ago | parent | prev [-]

Why would it help? Rust doesn’t do anything to make generated assembly code safer.

▲

rafaelmn 4 hours ago | parent [-]

You don't have to have a JIT to have a JS VM ?

	▲	skybrian 4 hours ago \| parent [-]
		But you would want one to get competitive performance.