Introducing EmDash – the spiritual successor to WordPress that solves plugin security

[p44]

EmDash is a full-stack TypeScript CMS based on Astro; the spiritual successor to WordPress

A full-stack TypeScript CMS built on Astro and Cloudflare. EmDash takes the ideas that made WordPress dominant -- extensibility, admin UX, a plugin ecosystem -- and rebuilds them on serverless, type-safe foundations. Plugins run in sandboxed Worker isolates, solving the fundamental security problem with WordPress's plugin architecture.

• https://blog.cloudflare.com/emdash-wordpress/
• https://github.com/emdash-cms/emdash

[james]

Interesting, even published with the MIT licence.

[p44]

@james Yes, interesting concept of isolation but I think this is somethings that have to depend from Cloudflare services... cannot be, eg, self-hosted... or not?

[robi]

It is very self hostable and has built in migration from WP sites among other goodies.

Definitely something to add to Cloudron.

[crazybrad]

@p44 Thank you for sharing:)

If you want isolated plugins, only Cloudflare Workers is supported. You can run plugins, but not isolated. Apparently this is a requested feature. Time will tell if this is implemented so that 100% of the feature set can be self-hosted.

[p44]

@robi It seems that some parts are required, eg. Cloudflare Workers.

@crazybrad with pleasure. Let see if this can be self-hosted and implemented in Cloudron... but I don’t think so...

[crazybrad]

@p44 If this could be hosted on CLoudron, I think that even without the isolated plugins this could be a powerful addition. As a dev environment, plugin isolation might not be critical. If might be acceptable to host a dev site on Cloudron and production on Cloudflare w/ Workers. Also, not everyone is security focused. Plugin isolation is a huge improvement, but there are other benefits of emDash as well.