deno_emit
deno_emit copied to clipboard
An allow list for remote modules with Deno.emit()
Now using Deno.emit to compile user submitted code that also gets executed could also pose a security issue when allowed to import any http resource. It would be nice if we could have a whitelist of domains that we can pass to the Deno.emit function to secure this.
Originally posted by @EliteScientist in https://github.com/denoland/deno/issues/9866#issuecomment-825203882
It certainly is worth considering an allow list/block list for Deno.emit() for remote modules, as it might be used in a situation where there is more untrusted code than anticipated.