node icon indicating copy to clipboard operation
node copied to clipboard

Warn about full access on --allow-fs-read=* and --allow-fs-write=*

Open LeoDog896 opened this issue 8 months ago • 1 comments

What is the problem this feature will solve?

While this is a CVE in Deno as Deno used to grant all these permissions on unfettered explicitly --allow-fs-read and --allow-fs-write, Node.JS does require a path to specify what files to read and write.

When access is granted to /proc/self/mem, a sophisticated attack can be carried out that gives the attacker full access bypassing the permission system.

What is the feature you are proposing to solve the problem?

If a user accidentally grants access to this file, a warning should appear in the console that warns against this file.

Additional notes

I am happy to work on this issue.

LeoDog896 avatar Jun 26 '24 18:06 LeoDog896