mirrors/node

0 Fork 0

mirror of https://github.com/nodejs/node.git synced 2026-10-29 10:45:11 +08:00

Files

T

History

RafaelGSS d8ccfe9ad4 policy: handle Module.constructor and main.extensions bypass

Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
PR-URL: https://github.com/nodejs-private/node-private/pull/445
Refs: https://hackerone.com/bugs?subject=nodejs&report_id=1960870
Refs: https://hackerone.com/bugs?subject=nodejs&report_id=2043807
CVE-ID: CVE-2023-32002,CVE-2023-32006

2023-08-08 10:00:22 -03:00

assert

cli: add --watch

2022-11-23 14:46:59 -05:00

bootstrap

src: disambiguate terms used to refer to builtins and addons

2022-12-08 09:55:24 -05:00

child_process

child_process: improve ipc write performance

2022-07-31 09:44:54 +02:00

cluster

cluster: use inspector utils

2022-12-07 09:07:07 -05:00

console

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

crypto

crypto: allow zero-length IKM in HKDF and in webcrypto PBKDF2

2022-10-11 14:45:30 -05:00

debugger

src: disambiguate terms used to refer to builtins and addons

2022-12-08 09:55:24 -05:00

dns

lib: refactor validateInt32 and validateUint32

2022-10-11 14:45:20 -05:00

fs: don't hard code name in validatePosition()

2022-10-11 14:45:29 -05:00

http2

lib: add Promise methods to avoid-prototype-pollution lint rule

2022-10-11 14:45:08 -05:00

legacy

lib: make process.binding('util') return only type checkers

2021-03-27 15:45:12 +00:00

main

src: disambiguate terms used to refer to builtins and addons

2022-12-08 09:55:24 -05:00

modules

policy: handle Module.constructor and main.extensions bypass

2023-08-08 10:00:22 -03:00

per_context

bootstrap: stop delaying instantiation of maps in per-context scripts

2022-10-11 14:45:20 -05:00

perf

perf_hooks: add initiatorType getter

2022-07-31 09:45:03 +02:00

policy

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

process

policy: disable process.binding() when enabled

2023-08-08 09:59:12 -03:00

readline

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

repl

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

source_map

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

streams

stream: refactor use es2020 statement

2022-10-11 14:45:24 -05:00

test

lib: add support for JSTransferable as a mixin

2021-04-29 13:45:34 +02:00

test_runner

test: fix test-runner-inspect

2022-12-07 09:06:59 -05:00

tls

tls: use logical OR operator

2022-10-11 14:45:14 -05:00

util

src: disambiguate terms used to refer to builtins and addons

2022-12-08 09:55:24 -05:00

v8: add v8.startupSnapshot utils

2022-07-31 15:54:58 +02:00

lib: implement safe alternatives to Promise static methods

2022-07-31 15:16:07 +02:00

watch_mode

cli: add --watch

2022-11-23 14:46:59 -05:00

webstreams

stream: add ReadableByteStream.tee()

2022-10-11 14:45:23 -05:00

worker

lib: refactor to avoid prototype pollution

2022-10-11 14:45:14 -05:00

abort_controller.js

lib: add abortSignal.throwIfAborted()

2022-08-01 16:48:35 +02:00

assert.js

benchmark,doc,lib,test: prepare for padding lint rule

2019-11-30 06:28:29 -08:00

async_hooks.js

lib: use null-prototype objects for property descriptors

2022-07-31 09:44:45 +02:00

blob.js

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

blocklist.js

net: allow net.BlockList to use net.SocketAddress objects

2021-04-02 06:16:42 -07:00

buffer.js

buffer,errors: add missing n literal in range error string

2021-04-17 19:34:42 +02:00

child_process.js

lib: add diagnostics channel for process and worker

2022-10-11 14:45:22 -05:00

cli_table.js

lib: refactor to use primordials in lib/internal/cli_table

2021-04-05 18:20:38 -07:00

constants.js

lib: replace charCodeAt with fixed Unicode

2020-06-19 07:46:37 -07:00

dgram.js

lib: refactor to use validateFunction

2021-01-27 20:46:54 +02:00

dtrace.js

lib: move DTRACE_* probes out of global scope

2019-03-12 14:19:36 +00:00

encoding.js

lib: use kEmptyObject in various places

2022-07-31 09:44:48 +02:00

error_serdes.js

lib: use null-prototype objects for property descriptors

2022-07-31 09:44:45 +02:00

errors.js

policy: disable process.binding() when enabled

2023-08-08 09:59:12 -03:00

event_target.js

lib: refactor to avoid prototype pollution

2022-10-11 14:45:14 -05:00

fixed_queue.js

lib: fix reference leak

2022-10-11 14:45:22 -05:00

freelist.js

http: remove unused hasItems() from freelist

2019-12-03 15:00:45 -08:00

freeze_intrinsics.js

lib: fix TODO in freeze_intrinsics

2022-07-31 09:45:01 +02:00

heap_utils.js

worker: add ability to take heap snapshot from parent thread

2020-02-03 07:04:13 -08:00

histogram.js

lib: use kEmptyObject in various places

2022-07-31 09:44:48 +02:00

http.js

http: trace http request / response

2022-10-11 14:45:11 -05:00

idna.js

dns: use url module instead of punycode for IDNA

2021-03-23 20:44:31 +01:00

inspector_async_hook.js

async_hooks: refactor to use more primordials

2020-11-20 20:10:19 +00:00

js_stream_socket.js

tools: enable no-var ESLint rule for lib

2022-07-31 09:43:37 +02:00

linkedlist.js

cluster: use linkedlist for round_robin_handle

2022-01-31 23:00:31 -05:00

net.js

tools: refactor avoid-prototype-pollution lint rule

2022-11-23 12:07:03 -05:00

options.js

bootstrap: refresh options in pre-execution

2022-07-31 09:43:29 +02:00

priority_queue.js

lib: remove unused code

2020-12-29 15:49:09 +00:00

promise_hooks.js

lib: use kEmptyObject in various places

2022-07-31 09:44:48 +02:00

querystring.js

typings: add JSDoc Types to lib/querystring

2021-04-18 11:00:28 +02:00

readme.md

doc: clarify text about internal module changes

2018-07-31 08:28:40 +03:00

repl.js

lib: use Number.parseInt from primordials

2020-10-07 13:44:20 +00:00

socket_list.js

benchmark,lib: change var to const

2019-03-30 13:16:39 +01:00

socketaddress.js

lib,test: fix bug in InternalSocketAddress

2022-10-11 14:45:25 -05:00

stream_base_commons.js

tls: improve handling of shutdown

2022-01-31 23:08:50 -05:00

timers.js

timers: check for nullish instead of falsy in loops

2022-03-14 09:32:03 -04:00

trace_events_async_hooks.js

lib: comment explaining special-case handling of promises

2021-07-29 11:56:54 +01:00

tty.js

lib: refactor to avoid unsafe regex primordials

2022-08-02 09:59:01 +02:00

url.js

lib: reset RegExp statics before running user code

2022-10-11 14:45:21 -05:00

util.js

lib: reset RegExp statics before running user code

2022-10-11 14:45:21 -05:00

v8_prof_polyfill.js

tools: add console to the list of restricted globals

2022-04-23 22:26:08 -04:00

v8_prof_processor.js

lib: refactor to avoid unsafe array iteration

2021-10-04 20:32:18 +02:00

validators.js

util: add default value option to parsearg

2022-11-24 09:28:33 -05:00

watchdog.js

test: add semicolons for linter update

2022-01-31 21:54:36 -05:00

worker.js

lib: add diagnostics channel for process and worker

2022-10-11 14:45:22 -05:00

readme.md

Internal Modules

The modules in lib/internal are intended for internal use in Node.js core only, and are not accessible with require() from user modules. These modules can be changed at any time. Reliance on these modules outside of core is not supported in any way.