GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — doc: document dangerous symlink behavior · nodejs/node@24458e2

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
  • doc/api
    • permissions.md
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎doc/api/permissions.md‎

Copy file name to clipboardExpand all lines: doc/api/permissions.md
+5Lines changed: 5 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -568,6 +568,11 @@ There are constraints you need to know before using this system:
568568
* Relative paths are not supported through the CLI (`--allow-fs-*`).
569569
* The model does not inherit to a child node process.
570570
* The model does not inherit to a worker thread.
571+
* Symbolic links will be followed even to locations outside of the set of paths
572+
that access has been granted to. Relative symbolic links may allow access to
573+
arbitrary files and directories. When starting applications with the
574+
permission model enabled, you must ensure that no paths to which access has
575+
been granted contain relative symbolic links.
571576
* When creating symlinks the target (first argument) should have read and
572577
write access.
573578
* Permission changes are not retroactively applied to existing resources.

0 commit comments

Comments
0 (0)
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.