Mention Brave supporting JITless mode

Security-wise, disabling JIT means 50% less code responsible for eval / running untrusted (in some cases, adversarial) code (Interp being the other 50%).

Historically, roughly half the security bugs in v8 (Chrome’s / Brave’s JavaScript engine) have been due to attacks on the JIT compiler. Coding up a hardened JIT compiler is a tall order, and so, in the meanwhile disabling it (at the cost of upto 1.5x performance) is considered prudent.

/cc: @SkewedZeppelin

6 Likes