Anorov
Anorov
Thank you for the amazing work @Lukasa
If you can update the version of `cfscrape` used by the application, you should stop getting this error.
Please include the full traceback.
@patriksimek @io4 Do you know if `vm.runInNewContext("arbitrary user input here", Object.create(null))` is sufficient to prevent access to all Node libraries (including `process` etc.)?
That example only appears to work for `vm.runInNewContext` with its default sandbox argument (an empty object). `Object.create(null)` as an alternative for the sandbox argument was provided as a possible mitigation....
@io4 I'm calling Node from Python (just running the `runInNewContext` and nothing else), taking the string result, and converting it to an int from Python. I'm not doing any other...
Cool, sounds good. I've been trying to remain as active as possible with my fork, so I'll gladly investigate any issues or suggestions for improvement that your developers or users...