Skip to content

Warn about full access on --allow-fs-read=* and --allow-fs-write=* #53598

Closed as not planned
@tristan-f-r

Description

@tristan-f-r

What is the problem this feature will solve?

While this is a CVE in Deno as Deno used to grant all these permissions on unfettered explicitly --allow-fs-read and --allow-fs-write, Node.JS does require a path to specify what files to read and write.

When access is granted to /proc/self/mem, a sophisticated attack can be carried out that gives the attacker full access bypassing the permission system.

What is the feature you are proposing to solve the problem?

If a user accidentally grants access to this file, a warning should appear in the console that warns against this file.

Additional notes

I am happy to work on this issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    feature requestIssues that request new features to be added to Node.js.permissionIssues and PRs related to the Permission ModelsecurityIssues and PRs related to security.stale

    Type

    No type

    Projects

    Status

    Triaged

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions