All posts
Engineering 7 minMay 11, 2026

How NeoLearn runs your code safely

Rule zero: user code never executes on the main web server process.

Playground code runs in your browser inside Web Workers with network APIs removed, watchdog timeouts and output caps. Python runs as WebAssembly via Pyodide; SQL via SQLite-WASM.

Hidden challenge tests are validated server-side inside capability-free WASM interpreters (Pyodide/QuickJS) with hard interrupt-based timeouts, memory limits and no filesystem or network access.

The result: no host access, no database access, no credentials — and an execution environment that is destroyed after every run.

Dashboard