gitroo-admin/node
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
node/doc/api
History
Exact
Tobias Nießen 242aaa0caa policy: disable process.binding() when enabled 
process.binding() can be used to trivially bypass restrictions imposed
through a policy. Since the function is deprecated already, simply
replace it with a stub when a policy is being enabled.

Fixes: https://hackerone.com/bugs?report_id=1946470
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
CVE-ID: CVE-2023-32559
PR-URL: https://github.com/nodejs-private/node-private/pull/459
2023-08-08 09:59:12 -03:00
..
addons.md doc: use serial comma in addons docs 2022-10-11 14:45:17 -05:00
assert.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
async_context.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
async_hooks.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
buffer.md 2022-08-16, Version 16.17.0 'Gallium' (LTS) 2022-08-15 13:22:21 +02:00
child_process.md doc: remove "currently" and comma splice from child_process.md 2022-10-11 14:45:29 -05:00
cli.md 2022-12-13, Version 16.19.0 'Gallium' (LTS) 2022-12-08 16:12:12 -05:00
cluster.md doc: fix examples in cluster.md 2022-07-31 09:44:40 +02:00
console.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
corepack.md doc: make minor adjustments 2022-07-31 09:44:18 +02:00
crypto.md doc,test: clarify behavior of DH generateKeys 2023-06-19 09:21:06 -03:00
debugger.md debugger: add debugger alias for exec(expr) 2022-04-23 22:26:05 -04:00
deprecations.md policy: disable process.binding() when enabled 2023-08-08 09:59:12 -03:00
dgram.md 2022-12-13, Version 16.19.0 'Gallium' (LTS) 2022-12-08 16:12:12 -05:00
diagnostics_channel.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
dns.md doc: revert anachronistic 'node:' module require()s in API history notes 2022-07-31 16:57:16 +02:00
documentation.md doc: add stability class to legacy status description 2022-07-31 09:43:28 +02:00
domain.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
embedding.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
errors.md policy: disable process.binding() when enabled 2023-08-08 09:59:12 -03:00
esm.md 2022-08-16, Version 16.17.0 'Gallium' (LTS) 2022-08-15 13:22:21 +02:00
events.md doc: add missing imports in events sample code 2022-10-11 14:45:16 -05:00
fs.md fs: fix typo in mkdir example 2022-10-11 14:45:28 -05:00
globals.md 2022-08-16, Version 16.17.0 'Gallium' (LTS) 2022-08-15 13:22:21 +02:00
http.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
http2.md doc: update links to MDN page about dynamic imports 2022-07-31 18:10:42 +02:00
https.md doc: update links to MDN page about dynamic imports 2022-07-31 18:10:42 +02:00
index.md doc: move policy docs to the permissions scope 2022-10-11 14:45:22 -05:00
inspector.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
intl.md doc: fix icu-small example 2022-07-31 09:45:04 +02:00
module.md 2022-08-16, Version 16.17.0 'Gallium' (LTS) 2022-08-15 13:22:21 +02:00
modules.md src: disambiguate terms used to refer to builtins and addons 2022-12-08 09:55:24 -05:00
n-api.md src: disambiguate terms used to refer to builtins and addons 2022-12-08 09:55:24 -05:00
net.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
os.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
packages.md doc: fix typo 2022-10-11 14:45:15 -05:00
path.md path: change basename() argument from ext to suffix 2022-10-11 14:45:28 -05:00
perf_hooks.md lib: add diagnostics channel and perf hooks detail 2022-10-11 14:45:15 -05:00
permissions.md doc: move policy docs to the permissions scope 2022-10-11 14:45:22 -05:00
policy.md doc: move policy docs to the permissions scope 2022-10-11 14:45:22 -05:00
process.md doc: remove empty line in YAML block 2022-10-11 14:45:24 -05:00
punycode.md doc: format doc/api/*.md with markdown formatter 2021-11-04 12:26:12 +01:00
querystring.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
readline.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
repl.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
report.md doc: use serial comma in report docs 2022-10-11 14:45:25 -05:00
stream.md doc: use serial comma in stream docs 2022-10-11 14:45:25 -05:00
string_decoder.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
synopsis.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
test.md 2022-12-13, Version 16.19.0 'Gallium' (LTS) 2022-12-08 16:12:12 -05:00
timers.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
tls.md doc: add missing parenthesis in TLSSocket section 2022-10-11 14:45:16 -05:00
tracing.md src: trace fs async api 2022-10-11 14:45:19 -05:00
tty.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
url.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
util.md 2022-12-13, Version 16.19.0 'Gallium' (LTS) 2022-12-08 16:12:12 -05:00
v8.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
vm.md doc: fix vm.Script createCachedData example 2022-10-11 14:45:23 -05:00
wasi.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00
webcrypto.md 2022-08-16, Version 16.17.0 'Gallium' (LTS) 2022-08-15 13:22:21 +02:00
webstreams.md 2022-10-12, Version 16.18.0 'Gallium' (LTS) 2022-10-12 01:49:15 -05:00
worker_threads.md doc,worker: document resourceLimits overrides 2022-10-11 14:45:21 -05:00
zlib.md doc: add node: prefix for all core modules 2022-07-31 09:44:40 +02:00