daohualiuxiang
/
node
mirror of https://github.com/nodejs/node.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
node/doc/api
History
RafaelGSS bf59539b98 src,loader,permission: throw on InternalWorker use 
Previously this PR it was expected that InternalWorker
usage doesn't require the --allow-worker when the permission
model is enabled. This, however, exposes a vulnerability
whenever the instance gets accessed by the user. For example
through diagnostics_channel.subscribe('worker_threads')

PR-URL: https://github.com/nodejs-private/node-private/pull/629
Refs: https://hackerone.com/reports/2575105
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Robert Nagy <ronagy@icloud.com>
CVE-ID: CVE-2025-23083
 		2025-01-21 15:53:55 -03:00
..
addons.md doc: fix c++ addon hello world sample 2024-12-09 17:43:50 +00:00
assert.md doc: `WeakSet` and `WeakMap` comparison details 2025-01-20 20:18:21 +00:00
async_context.md doc: remove unused import from sample code 2024-11-27 21:18:00 +01:00
async_hooks.md doc,tools: enforce use of `node:` prefix 2024-07-21 15:44:27 +00:00
buffer.md buffer: document concat zero-fill 2024-12-15 21:56:39 +00:00
child_process.md doc: fix parentheses in options 2025-01-12 17:58:56 +00:00
cli.md src,loader,permission: throw on InternalWorker use 2025-01-21 15:53:55 -03:00
cluster.md doc: move numCPUs require to top of file in cluster CJS example 2024-07-30 06:13:52 +00:00
console.md doc: add a note on console stream behavior 2024-11-02 12:37:09 +00:00
corepack.md doc: update pnpm link 2024-03-18 14:27:59 +00:00
crypto.md crypto: make generatePrime/checkPrime interruptible 2025-01-07 14:38:21 -08:00
debugger.md inspector: introduce the `--inspect-wait` flag 2024-05-11 18:48:30 +00:00
deprecations.md fs: deprecate passing invalid types in `fs.existsSync` 2025-01-10 13:04:14 +01:00
dgram.md dgram: support blocklist in udp 2024-12-15 14:19:27 +00:00
diagnostics_channel.md diagnostics_channel: capture console messages 2025-01-13 12:51:31 +00:00
dns.md doc: add esm examples to node:dns 2024-08-06 18:34:19 +00:00
documentation.md doc: clarify removal of experimental API does not require a deprecation 2024-11-08 13:02:49 +00:00
domain.md doc: fix typos 2023-04-23 13:34:08 +00:00
embedding.md doc: improve c++ embedder API doc 2024-11-01 03:43:53 +00:00
errors.md module: add ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX 2025-01-17 12:42:50 +00:00
esm.md esm: add experimental support for addon modules 2024-12-20 11:59:08 +00:00
events.md lib: disable default memory leak warning for AbortSignal 2024-12-07 10:41:00 +00:00
fs.md fs: allow `exclude` option in globs to accept glob patterns 2025-01-08 23:12:27 +00:00
globals.md doc: consolidate history table of CustomEvent 2024-11-09 02:47:32 +00:00
http.md http: add setDefaultHeaders option to http.request 2024-12-12 16:43:10 +00:00
http2.md 2024-10-16, Version 22.10.0 (Current) 2024-10-17 00:34:53 +02:00
https.md doc: add esm examples to node:https 2024-08-19 13:52:40 +00:00
index.md src, quic: refine more of the quic implementation 2025-01-06 10:47:36 -08:00
inspector.md tools: lint js in `doc/**/*.md` 2024-11-20 10:10:38 +00:00
intl.md doc: improve documentation about ICU data fallback 2023-09-22 13:24:23 +00:00
module.md doc: correct customization hook types & clarify descriptions 2025-01-14 14:24:41 +00:00
modules.md 2025-01-07, Version 22.13.0 'Jod' (LTS) 2025-01-07 14:36:47 -05:00
n-api.md node-api: define version 10 2024-12-31 16:29:50 +00:00
net.md 2025-01-07, Version 22.13.0 'Jod' (LTS) 2025-01-07 14:36:47 -05:00
os.md doc: fix broken Android building link 2024-09-15 12:29:18 +00:00
packages.md module: remove --experimental-default-type 2024-12-02 22:43:55 +00:00
path.md doc: add esm example in `path.md` 2024-11-08 11:27:17 +01:00
perf_hooks.md doc: add esm examples to node:perf_hooks 2024-12-12 21:44:05 +00:00
permissions.md doc: add section about using npx with permission model 2025-01-13 09:49:45 +00:00
process.md doc: clarify cjs/esm diff in `queueMicrotask()` vs `process.nextTick()` 2025-01-21 17:16:17 +00:00
punycode.md tools: lint js in `doc/**/*.md` 2024-11-20 10:10:38 +00:00
querystring.md doc: get rid of unnecessary `eslint-skip` comments 2023-11-22 19:03:33 +00:00
quic.md src, quic: refine more of the quic implementation 2025-01-06 10:47:36 -08:00
readline.md doc: add esm examples to node:readline 2024-12-14 19:50:34 +00:00
repl.md doc: add esm examples to node:repl 2024-12-14 19:50:52 +00:00
report.md 2025-01-07, Version 22.13.0 'Jod' (LTS) 2025-01-07 14:36:47 -05:00
single-executable-applications.md doc: `sea.getRawAsset(key)` always returns an ArrayBuffer 2024-12-12 11:23:13 +00:00
sqlite.md 2025-01-07, Version 22.13.0 'Jod' (LTS) 2025-01-07 14:36:47 -05:00
stream.md doc: remove confusing and outdated sentence 2024-11-27 10:26:27 +00:00
string_decoder.md doc: add esm examples to node:string_decoder 2024-10-26 20:36:25 +00:00
synopsis.md doc: clarify explaination text on how to run the example 2023-10-06 13:37:31 +00:00
test.md test_runner: add TestContext.prototype.waitFor() 2025-01-16 02:32:37 +00:00
timers.md doc: add esm examples to node:timers 2024-11-20 23:26:30 +00:00
tls.md doc: add esm examples to node:tls 2024-12-13 17:09:28 +00:00
tracing.md doc: add esm examples to node:trace_events 2025-01-10 01:33:57 +00:00
tty.md doc,tty: add documentation for ReadStream and WriteStream 2024-07-19 10:53:24 +00:00
typescript.md 2025-01-07, Version 23.6.0 (Current) 2025-01-07 18:12:47 +01:00
url.md doc: fix history info for `URL.prototype.toJSON` 2024-11-13 16:47:28 +00:00
util.md util: rename CallSite.column to columnNumber 2025-01-15 13:28:53 +00:00
v8.md tools: lint js in `doc/**/*.md` 2024-11-20 10:10:38 +00:00
vm.md tools: lint js in `doc/**/*.md` 2024-11-20 10:10:38 +00:00
wasi.md doc,tools: enforce use of `node:` prefix 2024-07-21 15:44:27 +00:00
webcrypto.md 2025-01-07, Version 22.13.0 'Jod' (LTS) 2025-01-07 14:36:47 -05:00
webstreams.md doc: add example for piping ReadableStream 2025-01-01 19:44:30 +00:00
worker_threads.md src,worker: add isInternalWorker 2025-01-14 18:24:30 +00:00
zlib.md doc: fix the `crc32` documentation 2024-12-24 21:53:53 +01:00