permission: v8.writeHeapSnapshot and process.report#48564
permission: v8.writeHeapSnapshot and process.report#48564nodejs-github-bot merged 2 commits intonodejs:mainfrom
Conversation
ec61426 to
0291784
Compare
0291784 to
635e2b2
Compare
Co-Authored-By: haxatron <haxatron1@gmail.com> Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
635e2b2 to
972c92b
Compare
| filename = *DiagnosticFilename( | ||
| env != nullptr ? env->thread_id() : 0, "report", "json"); | ||
| } | ||
| if (env != nullptr) { |
There was a problem hiding this comment.
I'm not entirely sure about when the env is null. Would that happen only when OOM or another crash reporter happens? If so, what would be the best way to throw an exception here?
Maybe @gireeshpunathil has some thoughts on this?
ShogunPanda
left a comment
There was a problem hiding this comment.
Other than your own comment, LGTM
|
Landed in 74c2d9c |
|
FWIW, the commit message does not adhere to the guidelines. |
What's missing? |
|
An imperative verb after the subsystem :) |
|
And in general, the commit message doesn't make much sense. It's impossible (at least for me) to understand what the commit does without looking at the diff. |
Co-Authored-By: haxatron <haxatron1@gmail.com> Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com> PR-URL: #48564 Reviewed-By: Paolo Insogna <paolo@cowtech.it> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Co-Authored-By: haxatron <haxatron1@gmail.com> Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com> PR-URL: nodejs#48564 Reviewed-By: Paolo Insogna <paolo@cowtech.it> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Co-Authored-By: haxatron <haxatron1@gmail.com> Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com> PR-URL: nodejs#48564 Reviewed-By: Paolo Insogna <paolo@cowtech.it> Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
|
@RafaelGSS corret me if I'm wrong but I don't believe the |
Even though the permission model, for now, doesn't handle other scopes than the node:fs module. Adding this validation on common write operations seems reasonable.
Co-Authored-By: @Haxatron
cc: @nodejs/security-wg