denoland-deno/tests/testdata/run/deny_some_permission_args.out

Warning --allow-run can be trivially exploited. Prefer specifying an allow list (https://docs.deno.com/runtime/fundamentals/security/#running-subprocesses)
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
PermissionStatus { state: "granted", onchange: null, partial: true }
PermissionStatus { state: "denied", onchange: null }
PermissionStatus { state: "granted", onchange: null }
feat: warn when using `--allow-run` with no allow list (#25215) 2024-09-16 19:08:02 -04:00			`Warning --allow-run can be trivially exploited. Prefer specifying an allow list (https://docs.deno.com/runtime/fundamentals/security/#running-subprocesses)`
feat(permissions): add "--deny-" flags (#19070) This commit adds new "--deny-" permission flags. These are complimentary to "--allow-" flags. These flags can be used to restrict access to certain resources, even if they were granted using "--allow-" flags or the "--allow-all" ("-A") flag. Eg. specifying "--allow-read --deny-read" will result in a permission error, while "--allow-read --deny-read=/etc" will allow read access to all FS but the "/etc" directory. Runtime permissions APIs ("Deno.permissions") were adjusted as well, mainly by adding, a new "PermissionStatus.partial" field. This field denotes that while permission might be granted to requested resource, it's only partial (ie. a "--deny-*" flag was specified that excludes some of the requested resources). Eg. specifying "--allow-read=foo/ --deny-read=foo/bar" and then querying for permissions like "Deno.permissions.query({ name: "read", path: "foo/" })" will return "PermissionStatus { state: "granted", onchange: null, partial: true }", denoting that some of the subpaths don't have read access. Closes #18804. --------- Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com> Co-authored-by: Nayeem Rahman <nayeemrmn99@gmail.com> 2023-08-03 07:19:19 -04:00			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null, partial: true }`
			`PermissionStatus { state: "denied", onchange: null }`
			`PermissionStatus { state: "granted", onchange: null }`