mirror of
https://github.com/denoland/deno.git
synced 2024-12-22 15:24:46 -05:00
5504acea67
This replaces `--allow-net` for import permissions and makes the security sandbox stricter by also checking permissions for statically analyzable imports. By default, this has a value of `--allow-import=deno.land:443,jsr.io:443,esm.sh:443,raw.githubusercontent.com:443,gist.githubusercontent.com:443`, but that can be overridden by providing a different set of hosts. Additionally, when no value is provided, import permissions are inferred from the CLI arguments so the following works because `fresh.deno.dev:443` will be added to the list of allowed imports: ```ts deno run -A -r https://fresh.deno.dev ``` --------- Co-authored-by: David Sherret <dsherret@gmail.com>
31 lines
1.3 KiB
Text
31 lines
1.3 KiB
Text
[# notice that the remote module is not downloaded here. This is so we do not need to add an --allow-import permission here]
|
|
Download http://localhost:4260/chalk
|
|
Download http://localhost:4260/chalk/chalk-5.0.1.tgz
|
|
Checking for slow types in the public API...
|
|
error[invalid-external-import]: invalid import to a non-JSR 'http' specifier
|
|
--> [WILDCARD]mod.ts:1:8
|
|
|
|
|
1 | import "http://localhost:4545/welcome.ts";
|
|
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ the specifier
|
|
|
|
|
= hint: replace this import with one from jsr or npm, or vendor the dependency into your package
|
|
|
|
info: the import was resolved to 'http://localhost:4545/welcome.ts'
|
|
info: this specifier is not allowed to be imported on jsr
|
|
info: jsr only supports importing `jsr:`, `npm:`, and `data:` specifiers
|
|
docs: https://jsr.io/go/invalid-external-import
|
|
|
|
error[invalid-external-import]: invalid import to a non-JSR 'http' specifier
|
|
--> [WILDCARD]mod.ts:2:8
|
|
|
|
|
2 | import "$echo";
|
|
| ^^^^^^^ the specifier
|
|
|
|
|
= hint: replace this import with one from jsr or npm, or vendor the dependency into your package
|
|
|
|
info: the import was resolved to 'http://localhost:4545/echo.ts'
|
|
info: this specifier is not allowed to be imported on jsr
|
|
info: jsr only supports importing `jsr:`, `npm:`, and `data:` specifiers
|
|
docs: https://jsr.io/go/invalid-external-import
|
|
|
|
error: Found 2 problems
|