TLDR Tech / InfoSec
Introducing EmDash — the spiritual successor to WordPress that solves plugin security
Cloudflare's EmDash (v0.1.0) is an open source, MIT-licensed CMS built in TypeScript on Astro and Cloudflare Workers designed to replace WordPress' fundamentally insecure plugin architecture. Each plugin runs in an isolated Dynamic Worker sandbox with capabilities declared statically in a manifest, limiting blast radius to only explicitly granted permissions rather than full database and filesystem access as in WordPress. EmDash deploys to any Node.js server or Cloudflare, includes built-in passkey authentication, a remote MCP server, x402 payment support, and WordPress import tooling.
Read the full story