4 ms·
Deno has a few of these by default an application has no access to the filesystem, env or network. You can allow only reading or only writing for files and you
by vorticalbox 3y ago
Deno has a few of these by default an application has no access to the filesystem, env or network.
You can allow only reading or only writing for files and you can also define what domains are allowed.
- jbverschoor 3y agoSure it's a huge step forward. But that's on an application level, which honestly I can do with sandbox-exec on macOS (see below). In Deno, all permissions would still propagate down to the dependencies. (version 1) (deny default) (allow file-read* (subpath "~/Downloads") ) (allow network-outbound (remote tcp "localhost:80") ) or (version 1) (allow default) (deny network*) or # start an airgapped shell, and play around in there.. sandbox-exec -p "(version 1)(allow default)(deny network*)" bash
- vorticalbox 3y agoThere have been a few GitHub issues open but from what I can tell it's in the "not technically possible with V8 VM" category