Zbyszek Tenerowicz
Zbyszek Tenerowicz
## What is the Problem Being Solved? Any level of dynamic behavior for CJS `require()` in endo implemented on top of Compartment requires either preloading all dynamically requested modules or...
TODO: - [ ] discuss whether `web-ext>bunyan>dtrace-provider` is needed - [ ] check if esbuild can work without scripts... wait - esbuild doesn't seem to be used. Does tsx use...
TODO: - [ ] two packages modify intrinsics - can they be removed? - [ ] ignoring css modules malfunction, gotta figure out why the build crashes on loading style.css...
Policy generation works with no quirks to pave over with overrides. Project successfully builds. lockdown inlining solved with html-webpack-plugin itself. There's room for improvement, but it's pretty simple as is....
This is a sequence diagram based on a security-focused walkthrough we had on 2023-02-20 The level of detail is arbitrary, but adding more would seem like rewriting the code into...
This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to upgrade pem from 1.14.5 to 1.15.1.  :information_source: Keep your...
Fixes a bypass from Gareth I'm not sure if my test works because my local setup broke. (edit) It fixes the bypass, but might be too strict, as it also...
Refs: #2431 This is the ModuleSource instance being produced in the test in SES: ``` ModuleSource { imports: [], exports: [ 'quuux' ], reexports: [], __syncModuleProgram__: "({ imports: $h_imports, liveVar:...
This test will make sure we don't start relying on direct eval for lockdown itself.
 Snyk has created this PR to upgrade @vercel/node from 3.2.7 to 3.2.10. :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly...