deno_emit icon indicating copy to clipboard operation
deno_emit copied to clipboard

An allow list for remote modules with Deno.emit()

Open kitsonk opened this issue 4 years ago • 1 comments

Now using Deno.emit to compile user submitted code that also gets executed could also pose a security issue when allowed to import any http resource. It would be nice if we could have a whitelist of domains that we can pass to the Deno.emit function to secure this.

Originally posted by @EliteScientist in https://github.com/denoland/deno/issues/9866#issuecomment-825203882

kitsonk avatar Apr 22 '21 23:04 kitsonk

It certainly is worth considering an allow list/block list for Deno.emit() for remote modules, as it might be used in a situation where there is more untrusted code than anticipated.

kitsonk avatar Apr 22 '21 23:04 kitsonk