Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

doc: mention v8.setFlagsFromString to pm #53731

Merged
merged 1 commit into from
Jul 6, 2024

Conversation

RafaelGSS
Copy link
Member

Just in case someone wonders if V8 flags that write to disk like: --redirect-code-traces-to= is bypassing Permission Model.

@nodejs-github-bot
Copy link
Collaborator

Review requested:

  • @nodejs/security-wg
@RafaelGSS RafaelGSS added the permission Issues and PRs related to the Permission Model label Jul 4, 2024
@nodejs-github-bot nodejs-github-bot added the doc Issues and PRs related to the documentations. label Jul 4, 2024
@@ -586,7 +586,8 @@ There are constraints you need to know before using this system:
* The Permission Model is initialized after the Node.js environment is set up.
However, certain flags such as `--env-file` or `--openssl-config` are designed
to read files before environment initialization. As a result, such flags are
not subject to the rules of the Permission Model.
not subject to the rules of the Permission Model. The same applies for V8
flags that can be set via runtime through `v8.setFlagsFromString`.
Copy link
Member

@RedYetiDev RedYetiDev Jul 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
flags that can be set via runtime through `v8.setFlagsFromString`.
flags that can be set via runtime through methods such as `v8.setFlagsFromString()`.

IMO using 'such as' allows accounts for any future functions with this behavior that might happen without updating this document.

(nit: functions are described via () IIRC)

@RafaelGSS RafaelGSS added the commit-queue Add this label to land a pull request using GitHub Actions. label Jul 6, 2024
@RedYetiDev
Copy link
Member

@RafaelGSS IMO you should fix the the () notation before this lands?

@nodejs-github-bot nodejs-github-bot removed the commit-queue Add this label to land a pull request using GitHub Actions. label Jul 6, 2024
@nodejs-github-bot nodejs-github-bot merged commit bea91db into nodejs:main Jul 6, 2024
23 checks passed
@nodejs-github-bot
Copy link
Collaborator

Landed in bea91db

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
doc Issues and PRs related to the documentations. permission Issues and PRs related to the Permission Model
5 participants