Security

JavaScript UDFs run in an isolated and sandboxed environment for security purposes.

  • Each query executes its own script functions and cannot access anything from outside its isolated environment.
  • JavaScript UDFs do not have access to the network or the filesystem.
  • JavaScript UDFs are supported only on dedicated Virtual Instances and will not be available on shared or free Virtual Instances.
  • All code generation functionality is disabled (eval, the Function constructor, etc).
  • JavaScript UDFs do not have access to any timing facility. Date.now() returns the same value for the entire duration of the query, which is the same value that CURRENT_TIMESTAMP() would return in SQL.