Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: clarify that WASM is trusted #56345

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

mcollina
Copy link
Member

This clarifies that WASM is trusted, too.

@mcollina mcollina requested a review from RafaelGSS December 23, 2024 10:41
@nodejs-github-bot
Copy link
Collaborator

Review requested:

  • @nodejs/tsc

@nodejs-github-bot nodejs-github-bot added the doc Issues and PRs related to the documentations. label Dec 23, 2024
Copy link
Contributor

@aduh95 aduh95 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you move that to the point number 3 The code it is asked to run?

node/SECURITY.md

Lines 114 to 117 in d1b8b5c

3. The code it is asked to run, including JavaScript and native code, even if
said code is dynamically loaded, e.g., all dependencies installed from the
npm registry.
The code run inherits all the privileges of the execution user.

Also, the subsystem should be doc:, not docs:

Copy link
Member

@mhdawson mhdawson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Signed-off-by: Matteo Collina <hello@matteocollina.com>
@mcollina mcollina force-pushed the clarify-that-wasm-is-truested branch from ac86b0d to e4cca8c Compare December 24, 2024 08:59
Signed-off-by: Matteo Collina <hello@matteocollina.com>
@@ -111,8 +111,8 @@ lead to a loss of confidentiality, integrity, or availability.
1. The developers and infrastructure that runs it.
2. The operating system that Node.js is running under and its configuration,
along with anything under control of the operating system.
3. The code it is asked to run, including JavaScript and native code, even if
said code is dynamically loaded, e.g., all dependencies installed from the
3. The code it is asked to run, including JavaScript, WASM and native code, even
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: Oxford comma

Suggested change
3. The code it is asked to run, including JavaScript, WASM and native code, even
3. The code it is asked to run, including JavaScript, WASM, and native code, even

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
doc Issues and PRs related to the documentations.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants