5 ms·

What is the point of a permissions system that can be trivially bypassed?

• eviks 1y ago
  To check a box > need to demonstrate security compliance.
• motorest 1y ago
  > What is the point of a permissions system that can be trivially bypassed? You seem to be confused. The system is not bypassed. The only argument you can make is that the system covers calls to node:fs, whereas some modules might not use node:fs to access the file system. You control what dependencies you run in your system, and how you design your software. If you choose to design your system in such a way that you absolutely need your Node.js app to have unrestricted access to the file systems, you have the tools to do that. If instead you want to lock down file system access, just use node:fs and flip a switch.