Struct SandboxConfig 

pub struct SandboxConfig {
    pub timeout_ms: u64,
    pub max_memory_bytes: usize,
    pub max_fuel: u64,
    pub max_observations: usize,
    pub max_scripts: usize,
    pub max_script_bytes: usize,
    pub max_total_script_bytes: usize,
    pub drain_timers: bool,
    pub max_timer_drains: usize,
    pub allow_nested_wasm: bool,
    pub nested_wasm_max_memory: usize,
    pub nested_wasm_max_fuel: u64,
}

Configuration for a single sandbox execution.

Sensible defaults are provided. Zero config for consumers who just want execute(scripts). Full control for experts.

Fields

timeout_ms: u64

Maximum wall-clock execution time in milliseconds. Default: 200ms. Enough for most phishing kits. Set to 5000ms for complex extension analysis.

max_memory_bytes: usize

Maximum WASM linear memory in bytes. Default: 16MB. QuickJS needs ~4MB for bootstrap.

max_fuel: u64

Maximum fuel (WASM instruction count). Default: 100_000_000 (~100ms of execution on modern hardware). 0 = unlimited (use timeout only).

max_observations: usize

Maximum observations before the sandbox stops recording. Prevents memory exhaustion from observation floods. Default: 10_000.

max_scripts: usize

Maximum number of scripts to execute per sandbox run. Default: 100.

max_script_bytes: usize

Maximum size of a single script in bytes. Default: 1MB.

max_total_script_bytes: usize

Maximum combined size of all scripts in bytes. Default: 5MB.

drain_timers: bool

Whether to immediately drain all pending timers after script execution. When true, setTimeout/setInterval callbacks fire synchronously. Default: true (for detonation — you want to trigger delayed payloads).

max_timer_drains: usize

Maximum timer callbacks to drain per execution. Default: 50.

allow_nested_wasm: bool

Whether to allow nested WASM instantiation. When true, JS new WebAssembly.Module() creates a real nested WASM instance. When false, it returns a stub that records the attempt but doesn’t execute. Default: true.

nested_wasm_max_memory: usize

Maximum linear memory for nested WASM instances in bytes. Default: 4MB.

nested_wasm_max_fuel: u64

Maximum fuel for nested WASM instances. Default: 10_000_000.

Implementations

impl SandboxConfig

pub fn detonation() -> Self

Config tuned for fast URL detonation (Sear). Low timeouts, drain timers, nested WASM disabled.

pub fn extension_analysis() -> Self

Config tuned for deep extension analysis (Soleno). Higher timeouts, nested WASM enabled, more observations.

pub fn research() -> Self

Config for interactive research. No fuel limit, high timeouts, everything enabled.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.