Tobias Nießen 242aaa0caa policy: disable process.binding() when enabled ...

process.binding() can be used to trivially bypass restrictions imposed
through a policy. Since the function is deprecated already, simply
replace it with a stub when a policy is being enabled.

Fixes: https://hackerone.com/bugs?report_id=1946470
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
CVE-ID: CVE-2023-32559
PR-URL: https://github.com/nodejs-private/node-private/pull/459

2023-08-08 09:59:12 -03:00

..

addons.md

doc: use serial comma in addons docs

2022-10-11 14:45:17 -05:00

assert.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

async_context.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

async_hooks.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

buffer.md

2022-08-16, Version 16.17.0 'Gallium' (LTS)

2022-08-15 13:22:21 +02:00

child_process.md

doc: remove "currently" and comma splice from child_process.md

2022-10-11 14:45:29 -05:00

cli.md

2022-12-13, Version 16.19.0 'Gallium' (LTS)

2022-12-08 16:12:12 -05:00

cluster.md

doc: fix examples in cluster.md

2022-07-31 09:44:40 +02:00

console.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

corepack.md

doc: make minor adjustments

2022-07-31 09:44:18 +02:00

crypto.md

doc,test: clarify behavior of DH generateKeys

2023-06-19 09:21:06 -03:00

debugger.md

debugger: add debugger alias for exec(expr)

2022-04-23 22:26:05 -04:00

deprecations.md

policy: disable process.binding() when enabled

2023-08-08 09:59:12 -03:00

dgram.md

2022-12-13, Version 16.19.0 'Gallium' (LTS)

2022-12-08 16:12:12 -05:00

diagnostics_channel.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

dns.md

doc: revert anachronistic 'node:' module require()s in API history notes

2022-07-31 16:57:16 +02:00

documentation.md

doc: add stability class to legacy status description

2022-07-31 09:43:28 +02:00

domain.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

embedding.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

errors.md

policy: disable process.binding() when enabled

2023-08-08 09:59:12 -03:00

esm.md

2022-08-16, Version 16.17.0 'Gallium' (LTS)

2022-08-15 13:22:21 +02:00

events.md

doc: add missing imports in events sample code

2022-10-11 14:45:16 -05:00

fs.md

fs: fix typo in mkdir example

2022-10-11 14:45:28 -05:00

globals.md

2022-08-16, Version 16.17.0 'Gallium' (LTS)

2022-08-15 13:22:21 +02:00

http2.md

doc: update links to MDN page about dynamic imports

2022-07-31 18:10:42 +02:00

http.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

https.md

doc: update links to MDN page about dynamic imports

2022-07-31 18:10:42 +02:00

index.md

doc: move policy docs to the permissions scope

2022-10-11 14:45:22 -05:00

inspector.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

intl.md

doc: fix icu-small example

2022-07-31 09:45:04 +02:00

module.md

2022-08-16, Version 16.17.0 'Gallium' (LTS)

2022-08-15 13:22:21 +02:00

modules.md

src: disambiguate terms used to refer to builtins and addons

2022-12-08 09:55:24 -05:00

n-api.md

src: disambiguate terms used to refer to builtins and addons

2022-12-08 09:55:24 -05:00

net.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

os.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

packages.md

doc: fix typo

2022-10-11 14:45:15 -05:00

path.md

path: change basename() argument from ext to suffix

2022-10-11 14:45:28 -05:00

perf_hooks.md

lib: add diagnostics channel and perf hooks detail

2022-10-11 14:45:15 -05:00

permissions.md

doc: move policy docs to the permissions scope

2022-10-11 14:45:22 -05:00

policy.md

doc: move policy docs to the permissions scope

2022-10-11 14:45:22 -05:00

process.md

doc: remove empty line in YAML block

2022-10-11 14:45:24 -05:00

punycode.md

doc: format doc/api/*.md with markdown formatter

2021-11-04 12:26:12 +01:00

querystring.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

readline.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

repl.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

report.md

doc: use serial comma in report docs

2022-10-11 14:45:25 -05:00

stream.md

doc: use serial comma in stream docs

2022-10-11 14:45:25 -05:00

string_decoder.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

synopsis.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

test.md

2022-12-13, Version 16.19.0 'Gallium' (LTS)

2022-12-08 16:12:12 -05:00

timers.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

tls.md

doc: add missing parenthesis in TLSSocket section

2022-10-11 14:45:16 -05:00

tracing.md

src: trace fs async api

2022-10-11 14:45:19 -05:00

tty.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

url.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

util.md

2022-12-13, Version 16.19.0 'Gallium' (LTS)

2022-12-08 16:12:12 -05:00

v8.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

vm.md

doc: fix vm.Script createCachedData example

2022-10-11 14:45:23 -05:00

wasi.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00

webcrypto.md

2022-08-16, Version 16.17.0 'Gallium' (LTS)

2022-08-15 13:22:21 +02:00

webstreams.md

2022-10-12, Version 16.18.0 'Gallium' (LTS)

2022-10-12 01:49:15 -05:00

worker_threads.md

doc,worker: document resourceLimits overrides

2022-10-11 14:45:21 -05:00

zlib.md

doc: add node: prefix for all core modules

2022-07-31 09:44:40 +02:00