Introducing EmDash — the spiritual successor to WordPress that solves plugin security

Cloudflare designed EmDash, its publishing system, to make plugin permissions explicit. In its launch description, each plugin runs in an isolated environment and receives access through declared capabilities, rather than unrestricted access to the site's underlying data.

The article's notification example requests permission to read content and send email. External network access must be separately declared for a particular hostname. This gives a site administrator a concrete basis for judging a plugin: the operations and destinations it is allowed to use. Cloudflare says a plugin can perform only the actions declared in its manifest; that is the vendor's description of a v0.1.0 preview, not an independent audit. It narrows the administrator's question rather than removing it: they still need to weigh the risks within the permissions they grant.