node/tools
Filip Skokan 06d308fb61
tools: prevent lib code from reading KeyObject and CryptoKey accessors
Add ESLint rules that reject public KeyObject and CryptoKey accessor
reads after internal brand checks. Internal code must use the private
key helpers so it reads native-backed slots instead of user-replaceable
properties.

Add a separate rule that rejects instanceof checks against KeyObject
and CryptoKey constructors, including the global CryptoKey constructor.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63111
Backport-PR-URL: https://github.com/nodejs/node/pull/63563
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
2026-06-23 01:06:39 +01:00
..
actions tools: improve backport review script 2026-05-07 15:41:38 +02:00
clang-format tools: bump brace-expansion in /tools/clang-format 2026-05-07 15:41:44 +02:00
configure.d tools: make nodedownload module compatible with Python 3.14 2025-06-23 12:22:47 -03:00
dep_updaters tools: fix test426 updater 2026-06-18 00:15:53 +02:00
doc crypto: add TurboSHAKE and KangarooTwelve Web Cryptography algorithms 2026-06-23 01:06:33 +01:00
eslint tools: bump brace-expansion from 5.0.5 to 5.0.6 in /tools/eslint 2026-06-18 21:12:35 +01:00
eslint-rules tools: prevent lib code from reading KeyObject and CryptoKey accessors 2026-06-23 01:06:39 +01:00
gyp tools: update gyp-next to 0.22.2 2026-06-18 00:15:55 +02:00
icu build,win: enable x64 PGO 2026-06-18 21:12:37 +01:00
inspector_protocol tools: fix inspector_protocol updater 2025-11-07 18:11:33 +01:00
lint-md tools: bump js-yaml from 4.1.0 to 4.1.1 in /tools/lint-md 2026-01-19 19:19:10 +01:00
macos-installer
msvs tools,win: upgrade install additional tools to Visual Studio 2026 2026-02-22 23:16:18 +01:00
pip
snapshot tools: improve error handling in node_mksnapshot 2025-09-09 08:34:17 +02:00
v8 deps: V8: override depot_tools version 2026-03-23 13:16:52 -05:00
v8_gypfiles build,win: enable x64 PGO 2026-06-18 21:12:37 +01:00
zos
build_addons.py build,tools: fix addon build deadlock on errors 2026-01-27 22:50:36 +01:00
certdata.txt crypto: update root certificates to NSS 3.123.1 2026-06-18 21:12:34 +01:00
checkimports.py
compress_json.py
copyfile.py
cpplint.py tools: refloat 10 Node.js patches to cpplint.py 2026-04-08 23:52:59 +02:00
create_android_makefiles
create_expfile.sh
enable_fips_include.py
executable_wrapper.h
find-inactive-collaborators.mjs
find-inactive-tsc.mjs
gen_node_def.cc
generate_config_gypi.py build: generate_config_gypi.py generates valid JSON 2026-04-08 23:53:05 +02:00
getmoduleversion.py
getnapibuildversion.py
getnodeversion.py
gyp_node.py
gypi_to_gn.py
install.py build: upgrade Python linter ruff, add rules ASYNC,PERF 2025-11-18 13:06:11 +01:00
js2c.cc src: build v8 tick processor as built-in source text modules 2026-04-08 23:52:58 +02:00
license-builder.sh build,deps: replace cjs-module-lexer with merve 2026-02-22 23:16:22 +01:00
license2rtf.mjs
lint-pr-url.mjs
lint-readme-lists.mjs tools: clarify README linter error message 2025-07-26 01:32:06 +02:00
lint-sh.mjs
lsan_suppressions.txt
macos-firewall.sh
make-v8.sh build,test: test array index hash collision 2026-03-23 13:16:48 -05:00
merge-wpt-reports.mjs
mk-ca-bundle.pl
mkssldef.py
osx-codesign.sh
osx-entitlements.plist
osx-notarize.sh
osx-productsign.sh
prepare_lief.py deps: add tools and scripts to pull LIEF as a dependency 2026-02-22 23:16:10 +01:00
pseudo-tty.py
release.sh
run-valgrind.py
run-worker.js
search_files.py
sign.bat win,tools: add description to signature 2025-10-06 16:26:12 +02:00
specialize_node_d.py
test-npm-package.js
test-v8.bat
test.py test: move FFI tests to NATIVE_SUITES 2026-06-18 00:15:52 +02:00
utils.py
v8-json-to-junit.py
valgrind.supp