Improve Security of node_modules and package.json Resolution · Issue #43192 · nodejs/node
What is the problem this feature will solve? It is easy to accidentally allow another user to influence what code node loads and executes. Details can be found at HackerOne reports 1564437 (CommonJS module loading), 1564444 (ECMAScript module resolution), and 1564445 (package.json). While these behaviors are documented, the security implications are easy to overlook. Insecure patterns around these
Permission Model · Issue #791 · nodejs/security-wg
Permission Model initial issue Hello everybody! Following up on the Security Model initiative and the Mini summit (Next-10) in April seems and consensus that Node.js aims to have a security permission system, thus, avoiding third-party libraries to access machine resources without user consent. This system was previously researched by James Snell and Anna Henningsen[1], which resulted in an excell
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Release v5.8.0 · nodejs/undici
Support Web Workers · Issue #43583 · nodejs/node
Improve documentation on Dual Module Packages · Issue #34515 · nodejs/node
Global `fetch` breaks `source-map` · Issue #42638 · nodejs/node
End-of-Life dates of Node.js 16 and OpenSSL 1.1.1 do not align · Issue #1222 · nodejs/TSC
doc: initial version of security-model-strategy.md by mhdawson · Pull Request #42709 · nodejs/node
http: refactor headersTimeout and requestTimeout logic by ShogunPanda · Pull Request #41263 · nodejs/node
util: add parseArgs module by bcoe · Pull Request #42675 · nodejs/node
src,doc: Experimental support for SEA by mhdawson · Pull Request #42334 · nodejs/node
Next 10 - Mini summit - Modern HTTP and Documentation · Issue #108 · nodejs/next-10
src: add option to disable loading native addons by d3lm · Pull Request #39977 · nodejs/node
lib: add fetch by targos · Pull Request #41749 · nodejs/node
GitHub - nodejs-mobile/nodejs-mobile: Full-fledged Node.js on Android and iOS
Roadmap for stabilization of vm modules · Issue #37648 · nodejs/node
ES Module loading with abolute path fails on windows · Issue #31710 · nodejs/node
Fetch · Issue #915 · nodejs/undici
Vote on integration of Yarn. · Issue #1012 · nodejs/TSC
deps: add Yarn 1.22.5 by arcanis · Pull Request #37277 · nodejs/node
