1
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2024-12-21 23:04:45 -05:00
denoland-deno/runtime/ops
David Sherret 74fc66da11
fix: lock down allow-run permissions more (#25370)
`--allow-run` even with an allow list has essentially been
`--allow-all`... this locks it down more.

1. Resolves allow list for `--allow-run=` on startup to an absolute
path, then uses these paths when evaluating if a command can execute.
Also, adds these paths to `--deny-write`
1. Resolves the environment (cwd and env vars) before evaluating
permissions and before executing a command. Then uses this environment
to evaluate the permissions and then evaluate the command.
2024-09-04 14:51:24 +02:00
..
os fix(node): Run node compat tests listed in the ignore field (and fix the ones that fail) (#24631) 2024-07-24 03:12:08 +00:00
web_worker Reland "refactor(fetch): reimplement fetch with hyper instead of reqwest" (#24593) 2024-07-18 01:37:31 +02:00
bootstrap.rs fix: removed unstable-htttp from deno help (#25216) 2024-08-27 13:45:27 +02:00
fs_events.rs fix: rename watch event missing (#24893) 2024-08-07 18:15:57 +02:00
http.rs chore: upgrade to rust 1.80 (#24778) 2024-07-29 12:58:04 -04:00
mod.rs chore: update copyright to 2024 (#21753) 2024-01-01 19:58:21 +00:00
permissions.rs BREAKING(permissions): remove --allow-hrtime (#25367) 2024-09-03 11:24:25 +02:00
process.rs fix: lock down allow-run permissions more (#25370) 2024-09-04 14:51:24 +02:00
runtime.rs Revert "feat: async context" (#24856) 2024-08-02 18:16:59 +00:00
signal.rs fix(ext/node): Add SIGPOLL and SIGUNUSED signals (#24259) 2024-06-19 13:41:09 +05:30
tty.rs fix(runtime/windows): fix calculation of console size (#23873) 2024-08-12 17:36:37 -04:00
utils.rs chore: update copyright to 2024 (#21753) 2024-01-01 19:58:21 +00:00
web_worker.rs Reland refactor(cli): use new sanitizer for resources (#22226) 2024-02-05 12:21:29 -07:00
worker_host.rs refactor: remove PermissionsContainer in deno_runtime (#24119) 2024-06-06 23:37:53 -04:00