summaryrefslogtreecommitdiff
path: root/runtime/permissions.rs
AgeCommit message (Collapse)Author
2021-04-14refactor: move timers to deno_timers op crate (#10179)Ben Noordhuis
Move timers out of runtime/ and into a standalone op crate.
2021-04-13feat(permissions): allow env permission to take values (#9825)crowlKats
2021-04-12perf(runtime): optimize PermissionState::check (#9993)Aaron O'Mullan
2021-04-12feat(runtime/permissions): prompt fallback (#9376)crowlKats
Co-authored-by: Yoshiya Hinosawa <stibium121@gmail.com> Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>
2021-04-10feat(permissions): allow run permission to take values (#9833)crowlKats
This commit adds allowlist support to `--allow-run` flag. Additionally `Deno.permissions.query()` allows to query for specific programs within allowlist.
2021-04-07feat: blob URL support (#10045)Luca Casonato
This commit adds blob URL support. Blob URLs are stored in a process global storage, that can be accessed from all workers, and the module loader. Blob URLs can be created using `URL.createObjectURL` and revoked using `URL.revokeObjectURL`. This commit does not add support for `fetch`ing blob URLs. This will be added in a follow up commit.
2021-04-03fix(permissions): don't panic when no input is given (#9894)upendra1997
Fixes #9633 Co-authored-by: Kitson Kelly <me@kitsonkelly.com>
2021-03-26remove macro_use (#9884)Ryan Dahl
2021-03-21refactor(runtime/permissions): Rename permission structs (#9841)Nayeem Rahman
2021-03-19refactor(runtime/ops/worker_host): simplify worker perms handling (#9835)crowlKats
2021-03-17refactor: clean up permission handling (#9367)crowlKats
2021-02-26chore(cli/runtime): use re-export serde from deno_core (#9599)Kitson Kelly
2021-02-17Make ModuleSpecifier a type alias, not wrapper struct (#9531)Ryan Dahl
2021-02-05feat(lsp): add TS quick fix code actions (#9396)Kitson Kelly
2021-02-02refactor(runtime): remove unneeded Deserialize trait for Permissions struct ↵crowlKats
(#9362)
2021-01-19feat(unstable): add Deno.resolveDns API (#8790)Yusuke Tanaka
2021-01-10update copyright to 2021 (#9081)Ryan Dahl
2021-01-08feat: denort binary (#9041)Luca Casonato
This commit adds new binary target called "denort". It is a "lite" version of "deno" binary that can only execute code embedded inside the binary itself. Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>
2021-01-06feat: Add configurable permissions for Workers (#8215)Steven Guerrero
This commit adds new option to "Worker" Web API that allows to configure permissions. New "Worker.deno.permissions" option can be used to define limited permissions to the worker thread by either: - inherit set of parent thread permissions - use limited subset of parent thread permissions - revoke all permissions (full sandbox) In order to achieve this functionality "CliModuleLoader" was modified to accept "initial permissions", which are used for top module loading (ie. uses parent thread permission set to load top level module of a worker).
2021-01-06refactor: move WebSocket API to an op_crate (#9026)Luca Casonato
2021-01-06feat(cli): support data urls (#8866)Kitson Kelly
Closes: #5059 Co-authored-by: Valentin Anger <syrupthinker@gryphno.de>
2021-01-04fix: panic on invalid file:// module specifier (#8964)Maayan Hanin
2020-12-30BREAKING(unstable): Use hosts for net allowlists (#8845)Nayeem Rahman
Allowlist checking already uses hosts but for some reason requests, revokes and the runtime permissions API use URLs. - BREAKING(lib.deno.unstable.d.ts): Change NetPermissionDescriptor::url to NetPermissionDescriptor::host - fix(runtime/permissions): Don't add whole URLs to the allowlist on request - fix(runtime/permissions): Harden strength semantics: ({ name: "net", host: "127.0.0.1" } is stronger than { name: "net", host: "127.0.0.1:8000" }) for blocklisting - refactor(runtime/permissions): Use tuples for hosts, make the host optional in Permissions::{query_net, request_net, revoke_net}()
2020-12-29refactor(cli/flags): change allow_read/write/net types from bool to ↵Yusuke Tanaka
Option<Vec<T>> (#8896) This PR refactors "cli/flags.rs" and "runtime/permissions.rs" so that "allow_read", "allow_write" and "allow_net" themselves have allowlists, instead of storing them in additional fields.
2020-12-17chore(runtime): fix typo (#8791)Yusuke Tanaka
2020-12-13refactor: deno_runtime crate (#8640)Bartek Iwańczuk
This commit moves Deno JS runtime, ops, permissions and inspector implementation to new "deno_runtime" crate located in "runtime/" directory. Details in "runtime/README.md". Co-authored-by: Ryan Dahl <ry@tinyclouds.org>