mirror of
https://github.com/denoland/deno.git
synced 2024-12-15 11:58:42 -05:00
adc2f08c17
This commit adds new option to "Worker" Web API that allows to configure permissions. New "Worker.deno.permissions" option can be used to define limited permissions to the worker thread by either: - inherit set of parent thread permissions - use limited subset of parent thread permissions - revoke all permissions (full sandbox) In order to achieve this functionality "CliModuleLoader" was modified to accept "initial permissions", which are used for top module loading (ie. uses parent thread permission set to load top level module of a worker).
27 lines
544 B
JavaScript
27 lines
544 B
JavaScript
onmessage = async () => {
|
|
const { state } = await Deno.permissions.query({
|
|
name: "read",
|
|
});
|
|
|
|
const worker = new Worker(
|
|
new URL("./read_check_worker.js", import.meta.url).href,
|
|
{
|
|
type: "module",
|
|
deno: {
|
|
namespace: true,
|
|
permissions: {
|
|
read: false,
|
|
},
|
|
},
|
|
},
|
|
);
|
|
|
|
worker.onmessage = ({ data: childHasPermission }) => {
|
|
postMessage({
|
|
parentHasPermission: state === "granted",
|
|
childHasPermission,
|
|
});
|
|
close();
|
|
};
|
|
worker.postMessage(null);
|
|
};
|