GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — doc: trust FFI in the threat model · nodejs/node@b43ecf4

File tree

Expand file treeCollapse file tree
Open diff view settings
Filter options
  • SECURITY.md
Expand file treeCollapse file tree
Open diff view settings
Collapse file

‎SECURITY.md‎

Copy file name to clipboardExpand all lines: SECURITY.md
+1-1Lines changed: 1 addition & 1 deletion
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -213,7 +213,7 @@ then untrusted input must not lead to arbitrary JavaScript code execution.
213213
along with anything under the control of the operating system.
214214
* The code it is asked to run, including JavaScript, WASM and native code, even
215215
if said code is dynamically loaded, e.g., all dependencies installed from the
216-
npm registry.
216+
npm registry or libraries loaded via `node:ffi`.
217217
The code run inherits all the privileges of the execution user.
218218
* Inputs provided to it by the code it is asked to run, as it is the
219219
responsibility of the application to perform the required input validations,

0 commit comments

Comments
0 (0)
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.