Issue Summary

The Forge sandbox runtime creates a separate execution environment for each request, while the current Native Node.js runtime keeps the Node environment between invocations.

Forge apps that let users run scripts in the context of the app could use per-execution isolation to ensure scripts did not have access to the data of other tenants. (Note that this is unsafe: without preventive measures, a script could effectively take full control of the whole app, if only for the duration of the request.) However, these apps will not have this isolation on the current runtime.

Configuring an app with users’ scripts is a useful feature. This suggestion is to have a way to execute untrusted scripts isolated between different tenants and from the app itself.