David Sherret 74fc66da11 fix: lock down allow-run permissions more (#25370) ... `--allow-run` even with an allow list has essentially been `--allow-all`... this locks it down more. 1. Resolves allow list for `--allow-run=` on startup to an absolute path, then uses these paths when evaluating if a command can execute. Also, adds these paths to `--deny-write` 1. Resolves the environment (cwd and env vars) before evaluating permissions and before executing a command. Then uses this environment to evaluate the permissions and then evaluate the command.		2024-09-04 14:51:24 +02:00
..
assets	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
bench	refactor(cli/js): align error messages (#25406)	2024-09-04 09:19:55 +02:00
benches	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
cache	chore: migrate bench, publish, and more itests to spec tests (#23584)	2024-04-29 10:08:27 -04:00
cert	chore: update to std@2024.07.19 (#24715)	2024-07-25 15:30:28 +10:00
check	BREAKING: remove deno bundle (#25339)	2024-09-02 17:27:37 +02:00
commonjs	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
compile	chore: update to std@2024.07.19 (#24715)	2024-07-25 15:30:28 +10:00
coverage	chore: update to std@2024.07.19 (#24715)	2024-07-25 15:30:28 +10:00
doc	perf: update deno_doc (#24700)	2024-07-24 12:23:16 -07:00
dynamic_import	fix(permissions): handle ipv6 addresses correctly (#24397)	2024-07-05 23:45:06 +01:00
encoding	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
file_extensions	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
fmt	feat(fmt): support HTML, Svelte, Vue, Astro and Angular (#25019)	2024-08-14 22:58:48 +02:00
image	fix(ext/web): properly handle Blob case for createImageBitmap (#23518)	2024-05-07 04:47:42 -07:00
import_attributes	feat: deprecate import assertions (#25281)	2024-08-29 01:06:09 +00:00
import_maps	chore: rough first pass on spec tests (#22877)	2024-03-13 16:21:13 +00:00
info	test: fix info::info_import_map test (#25389)	2024-09-03 13:18:51 +00:00
inspector	chore: enable clippy::print_stdout and clippy::print_stderr (#23732)	2024-05-08 22:45:06 -04:00
install	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
jsx	feat: add jsx precompile skip element option (#23457)	2024-04-22 17:07:36 +02:00
jupyter	chore: move more tests away from itest (#22909)	2024-03-15 15:46:51 -04:00
lint	chore: migrate bench, publish, and more itests to spec tests (#23584)	2024-04-29 10:08:27 -04:00
lockfile	feat: lockfile v4 by default (#25165)	2024-08-26 23:01:50 +00:00
lsp	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
malformed_config	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
module_graph	chore: update references to deno_std to use JSR (#23239)	2024-04-10 17:26:35 -04:00
node	chore: fix flaky rejection_handled_web_process (#23817)	2024-05-14 23:51:51 +00:00
npm	feat(cli): give access to process global everywhere (#25291)	2024-09-04 11:04:06 +02:00
package_json	feat: improve lockfile v4 to store normalized version constraints and be more terse (#25247)	2024-08-28 14:17:47 -04:00
publish	fix(publish): workspace included license file had incorrect path (#24747)	2024-07-26 15:35:29 +00:00
repl	chore: bump deno_core (#22596)	2024-02-27 08:05:57 -07:00
run	fix: lock down allow-run permissions more (#25370)	2024-09-04 14:51:24 +02:00
runtime	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
serve	feat(serve): Opt-in parallelism for deno serve (#24920)	2024-08-14 22:26:21 +00:00
subdir	FUTURE: remove import assertions support for JavaScript (#23541)	2024-04-29 22:43:05 +02:00
task	chore: Fix failing task_npx_non_existent test (#23945)	2024-05-22 18:57:57 +00:00
test	BREAKING(permissions): remove --allow-hrtime (#25367)	2024-09-03 11:24:25 +02:00
tls	fix(ext/tls): add support EC private key (#23261)	2024-04-08 11:36:34 -06:00
tsc	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
tsc2	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
type_definitions	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
unfurl	feat(publish): support sloppy imports and bare node built-ins (#22588)	2024-02-27 15:13:16 +00:00
webcrypto	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
webgpu	fix(ext/webgpu): assign missing constants property of shader about GPUDevice.createRenderPipeline[Async] (#24803)	2024-08-01 11:19:25 -07:00
workers	BREAKING(permissions): remove --allow-hrtime (#25367)	2024-09-03 11:24:25 +02:00
cat.ts	feat(lint): deno lint --fix and lsp quick fixes (#22615)	2024-03-21 14:18:59 -07:00
echo.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
echo_server.ts	chore: update to std@2024.07.19 (#24715)	2024-07-25 15:30:28 +10:00
env	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
env_unparsable	fix: --env flag confusing message on syntax error (#23915)	2024-05-27 15:06:18 +02:00
error_cause_recursive_aggregate.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
error_cause_recursive_aggregate.ts.out	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
error_cause_recursive_tail.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
error_cause_recursive_tail.ts.out	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
navigator_language.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
navigator_languages.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
spawn_kill_permissions.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
symlink_to_subdir	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
welcome.ts	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00