Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-11-12 | fix(permissions): say to use --allow-run instead of --allow-all (#26842) | David Sherret | |
For https://github.com/denoland/deno/issues/26839 | |||
2024-09-04 | fix: lock down allow-run permissions more (#25370) | David Sherret | |
`--allow-run` even with an allow list has essentially been `--allow-all`... this locks it down more. 1. Resolves allow list for `--allow-run=` on startup to an absolute path, then uses these paths when evaluating if a command can execute. Also, adds these paths to `--deny-write` 1. Resolves the environment (cwd and env vars) before evaluating permissions and before executing a command. Then uses this environment to evaluate the permissions and then evaluate the command. | |||
2024-08-27 | fix(permissions): disallow launching subprocess with LD_PRELOAD env var ↵ | David Sherret | |
without full run permissions (#25221) Ref https://github.com/denoland/deno/pull/25215 Closes https://github.com/denoland/deno/issues/11964 |