node
node copied to clipboard
Warn about full access on --allow-fs-read=* and --allow-fs-write=*
What is the problem this feature will solve?
While this is a CVE in Deno as Deno used to grant all these permissions on unfettered explicitly --allow-fs-read
and --allow-fs-write
, Node.JS does require a path to specify what files to read and write.
When access is granted to /proc/self/mem
, a sophisticated attack can be carried out that gives the attacker full access bypassing the permission system.
What is the feature you are proposing to solve the problem?
If a user accidentally grants access to this file, a warning should appear in the console that warns against this file.
Additional notes
I am happy to work on this issue.