David Sherret 74fc66da11 fix: lock down allow-run permissions more (#25370) ... `--allow-run` even with an allow list has essentially been `--allow-all`... this locks it down more. 1. Resolves allow list for `--allow-run=` on startup to an absolute path, then uses these paths when evaluating if a command can execute. Also, adds these paths to `--deny-write` 1. Resolves the environment (cwd and env vars) before evaluating permissions and before executing a command. Then uses this environment to evaluate the permissions and then evaluate the command.		2024-09-04 14:51:24 +02:00
..
adding_npm_dep_in_dynamic_import	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00
bin_entries_prefer_closer	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
byonm	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
check_pkg_json_import	chore: fix flaky net_listen_allow_localhost_4555 (#23726)	2024-05-07 17:21:56 +00:00
check_prefers_non_types_node_pkg	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
check_types_in_types_pkg	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
cjs_import_dual	fix(check): CJS types importing dual ESM/CJS package should prefer CJS types (#24492)	2024-07-10 14:46:25 -04:00
cjs_internal_types_default_export	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
conditional_exports	chore: fix flaky net_listen_allow_localhost_4555 (#23726)	2024-05-07 17:21:56 +00:00
conditional_exports_node_modules_dir	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00
dynamic_npm_resolution_failure	feat: improve lockfile v4 to store normalized version constraints and be more terse (#25247)	2024-08-28 14:17:47 -04:00
es_module	BREAKING: remove deno bundle (#25339)	2024-09-02 17:27:37 +02:00
esm_import_cjs_default	fix(node): better detection for when to surface node resolution errors (#24653)	2024-07-24 00:22:24 +00:00
exec_file_inside_npm_package	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
future_auto_install_no_package_json	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
future_node_modules_dir_setting	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
invalid_package_name	feat: improve lockfile v4 to store normalized version constraints and be more terse (#25247)	2024-08-28 14:17:47 -04:00
lifecycle_scripts	fix: lock down allow-run permissions more (#25370)	2024-09-04 14:51:24 +02:00
local_dir_no_duplicate_resolution	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00
lock_file_integrity_failure	fix: adjust suggestion for lockfile regeneration (#25107)	2024-08-20 20:13:17 +02:00
lossy_utf8_module	fix(ext/node): lossy UTF-8 read node_modules files (#24140)	2024-06-08 18:36:13 +02:00
lossy_utf8_package_json	fix(ext/node): lossy UTF-8 read node_modules files (#24140)	2024-06-08 18:36:13 +02:00
lossy_utf8_script	fix(ext/node): lossy UTF-8 read node_modules files (#24140)	2024-06-08 18:36:13 +02:00
lossy_utf8_script_from_cjs	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00
no_types_cjs	fix(node): better detection for when to surface node resolution errors (#24653)	2024-07-24 00:22:24 +00:00
no_types_in_conditional_exports	fix(node): better detection for when to surface node resolution errors (#24653)	2024-07-24 00:22:24 +00:00
npm_pkg_depend_dep_same_name	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_bad_registry_config	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_bad_token	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_basic_auth	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_deno_json	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_homedir	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_not_next_to_package_json	fix(flags): require global flag for permission flags in install subcommand (#25391)	2024-09-03 12:40:50 -07:00
npmrc_password_no_username	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_tarball_other_server	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00
npmrc_username_no_password	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
npmrc_username_password	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
require_resolve_bad_paths_global_cache	chore: fix flaky net_listen_allow_localhost_4555 (#23726)	2024-05-07 17:21:56 +00:00
types_general	fix(node): better detection for when to surface node resolution errors (#24653)	2024-07-24 00:22:24 +00:00
unanalyzable_dynamic_import	fix: support importing statically unanalyzable npm specifiers (#24107)	2024-06-05 15:18:06 -04:00
worker_shutdown_during_npm_import	chore: add test for worker shutting down during npm import (#24109)	2024-06-10 13:46:28 +02:00
workers	fix(ext/node): fix prismjs compatibiliy in Web Worker (#25062)	2024-08-17 11:16:43 +09:00
workspace_basic	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
workspace_conflicting_dep	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
workspace_dep_aliases	chore: remove DENO_FUTURE=1 from spec tests (#25329)	2024-08-31 21:25:32 +00:00
workspace_sub_deno_json	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00
workspace_wildcards	refactor: remove DENO_FUTURE (#25314)	2024-08-30 21:58:24 +00:00