1
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2024-11-24 15:19:26 -05:00
denoland-deno/cli/args
David Sherret 74fc66da11
fix: lock down allow-run permissions more (#25370)
`--allow-run` even with an allow list has essentially been
`--allow-all`... this locks it down more.

1. Resolves allow list for `--allow-run=` on startup to an absolute
path, then uses these paths when evaluating if a command can execute.
Also, adds these paths to `--deny-write`
1. Resolves the environment (cwd and env vars) before evaluating
permissions and before executing a command. Then uses this environment
to evaluate the permissions and then evaluate the command.
2024-09-04 14:51:24 +02:00
..
deno_json.rs refactor: update to use deno_package_json (#24688) 2024-07-23 17:34:46 -04:00
flags.rs fix: lock down allow-run permissions more (#25370) 2024-09-04 14:51:24 +02:00
flags_net.rs fix(permissions): handle ipv6 addresses correctly (#24397) 2024-07-05 23:45:06 +01:00
import_map.rs feat: npm workspace and better Deno workspace support (#24334) 2024-07-04 00:54:33 +00:00
lockfile.rs refactor: remove DENO_FUTURE (#25314) 2024-08-30 21:58:24 +00:00
mod.rs fix: only enable byonm if workspace root has pkg json (#25379) 2024-09-03 09:18:37 +00:00
package_json.rs refactor: update to use deno_package_json (#24688) 2024-07-23 17:34:46 -04:00