Benjamin Gruenbaum
Benjamin Gruenbaum
Hmm, @aduh95 what do you think?
@gorankarlic Antoine's PR landed in Node - can you please take a look :)?
I think the point of `-r internal/test/binding` is that it exposes a `primordials` global object with access to all the primordials (the locked object) - in our case we would...
The primordial itself is not but its properties are. Nothing is stopping us from doing this for example: ``` ➜ Code git:(main) node --expose-internals -r internal/test/binding -e "primordials.Date.now = ()...
But I think we can override the methods called after `new Date()` which are called (like toUTCString() and valueOf()) instead can't we?
I can just make a PR to node to not do [this](https://github.com/nodejs/node/blob/fa0c6883a65737e0135b107f5e886acbdfb89ec5/lib/internal/per_context/primordials.js#L424) when the --expose-primordials flag is set probably?
Let's see how it goes https://github.com/nodejs/node/pull/40733
@benlesh does the fix look good?
@spion-h4 hey what happened to your GitHub?
> We need a way to control the security of this. There are quite a few possible attacks when reading files from disk on servers. So your concern is that...