dnotebook icon indicating copy to clipboard operation
dnotebook copied to clipboard

Published 20 hours ago • verified publisher icon javascriptdata

Secure vm process

Open risenW opened this issue 3 years ago • 1 comments

Executing code with the Nodejs VM module has many known security vulnerabilities, and we need to address them before any major release.

This tool might help: https://github.com/patriksimek/vm2

See also: https://github.com/nodejs/node/issues/40718 https://pwnisher.gitlab.io/nodejs/sandbox/2019/02/21/sandboxing-nodejs-is-hard.html https://github.com/laverdet/isolated-vm

risenW avatar Jan 30 '22 10:01 risenW

@risenW can i look into this? I'm really interested in a node related issue

AceTheCreator avatar Mar 08 '22 14:03 AceTheCreator