mirror of
https://github.com/denoland/deno.git
synced 2024-10-31 09:14:20 -04:00
adc2f08c17
This commit adds new option to "Worker" Web API that allows to configure permissions. New "Worker.deno.permissions" option can be used to define limited permissions to the worker thread by either: - inherit set of parent thread permissions - use limited subset of parent thread permissions - revoke all permissions (full sandbox) In order to achieve this functionality "CliModuleLoader" was modified to accept "initial permissions", which are used for top module loading (ie. uses parent thread permission set to load top level module of a worker).
17 lines
656 B
JavaScript
17 lines
656 B
JavaScript
self.onmessage = async () => {
|
|
const hrtime = await Deno.permissions.query({ name: "hrtime" });
|
|
const net = await Deno.permissions.query({ name: "net" });
|
|
const plugin = await Deno.permissions.query({ name: "plugin" });
|
|
const read = await Deno.permissions.query({ name: "read" });
|
|
const run = await Deno.permissions.query({ name: "run" });
|
|
const write = await Deno.permissions.query({ name: "write" });
|
|
self.postMessage(
|
|
hrtime.state === "denied" &&
|
|
net.state === "denied" &&
|
|
plugin.state === "denied" &&
|
|
read.state === "denied" &&
|
|
run.state === "denied" &&
|
|
write.state === "denied",
|
|
);
|
|
self.close();
|
|
};
|