Back to TC39




To ensure the ECMAScript (JavaScript) security model is effective for the constantly evolving threat landscape of today and tomorrow.

Programme of work:

  1. To assess the security impacts of proposals to TC39.
  2. To produce documentation on the ECMAScript security model.
  3. To introduce proposals that will help developers create secure programs.
  4. To recommend a committee response to privately disclosed security issues.
  5. To maintain best practices or recommendations for writing secure programs.
  6. To monitor the changing threat landscape for popular embeddings.


Convenor: Granville Schmidt (F5 Networks)
Secretary: Istvan Sebestyen (Ecma International)