3 ms·

Does this kind of thing impact node apps?

• lights0123 6y ago
  It should, but unless you've manually restricted APIs, you could always just run arbitrary code anyways.
• dspillett 6y ago
  "It depends". But potentially, yes. Depending on the basis of the flaw. It could potentially affect Electron apps too, as they contain both chromium and node - though the content that can be thrown at their internal instances is likely a lot less varied than that seen in the wider internet that your desktop web browser is routinely exposed to.
• kentonv 6y ago
  Not really. While the bug technically exists on Node, generally people do not use Node to run untrusted JS/Wasm code. Node isn't designed to be a sandbox.
  • fistynuts 6y ago
    People install random Node modules every day.
    • cryptica 6y ago
      Yes but unlike the browser, Node.js modules all run in a trusted environment anyway (you should never install modules you don't trust) because there are many ways that a malicious module could hijack the main process to read memory or user input so this vulnerability adds nothing.