RafaelGSS 205f1e643e permission: handle fs path traversal ...

PR-URL: https://github.com/nodejs-private/node-private/pull/403
Refs: https://hackerone.com/bugs?subject=nodejs&report_id=1952978
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
CVE-ID: CVE-2023-30584

2023-06-20 17:31:47 -03:00

..

assert

…

dns

…

fs

…

inspector

…

internal

permission: handle fs path traversal

2023-06-20 17:31:47 -03:00

path

…

readline

…

stream

stream: add pipeline() for webstreams

2023-02-02 19:45:42 +00:00

test

test_runner: expose reporter for use in run api

2023-03-28 12:10:34 +00:00

timers

lib: enforce use of trailing commas in more files

2023-02-16 18:47:24 +01:00

util

…

_http_agent.js

lib: add trailing commas to more internal files

2023-02-26 11:34:02 +01:00

_http_client.js

url: offload URLSearchParams initialization

2023-03-01 17:03:58 +00:00

_http_common.js

lib: add trailing commas to more internal files

2023-02-26 11:34:02 +01:00

_http_incoming.js

lib: add trailing commas to more internal files

2023-02-26 11:34:02 +01:00

_http_outgoing.js

http: send implicit headers on HEAD with no body

2023-05-26 12:38:24 +00:00

_http_server.js

https: fix connection checking interval not clearing on server close

2023-06-12 07:47:25 +00:00

_stream_duplex.js

…

_stream_passthrough.js

…

_stream_readable.js

…

_stream_transform.js

…

_stream_wrap.js

…

_stream_writable.js

…

_tls_common.js

…

_tls_wrap.js

tls: reapply servername on happy eyeballs connect

2023-06-02 04:40:47 +00:00

.eslintrc.yaml

buffer: graduate File from experimental and expose as global

2023-03-22 19:28:12 +00:00

assert.js

assert: deprecate callTracker

2023-04-29 06:57:08 +00:00

async_hooks.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

buffer.js

buffer: combine checking range of sourceStart in buf.copy

2023-05-07 23:58:41 +00:00

child_process.js

child_process: use signal.reason in child process abort

2023-05-08 08:17:03 +00:00

cluster.js

cluster: use ObjectPrototypeHasOwnProperty

2023-05-25 16:04:19 +00:00

console.js

…

constants.js

…

crypto.js

crypto: remove DEFAULT_ENCODING

2023-03-26 18:03:58 +00:00

dgram.js

src: return uint32 for guessHandleType

2023-06-15 19:21:49 +00:00

diagnostics_channel.js

diagnostics_channel: fix ref counting bug when reaching zero subscribers

2023-04-13 13:40:50 +00:00

dns.js

dns: call ada::idna::to_ascii directly from c++

2023-05-10 16:04:35 +00:00

domain.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

events.js

events: add getMaxListeners method

2023-03-19 12:58:19 +00:00

fs.js

permission: handle fs.openAsBlob

2023-06-20 17:31:42 -03:00

http2.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

http.js

http: prevent writing to the body when not allowed by HTTP spec

2023-05-13 17:09:26 +00:00

https.js

https: fix connection checking interval not clearing on server close

2023-06-12 07:47:25 +00:00

inspector.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

module.js

module: implement register utility

2023-06-12 00:00:46 +00:00

net.js

src: return uint32 for guessHandleType

2023-06-15 19:21:49 +00:00

os.js

tools: fix jsdoc lint

2023-05-02 00:48:20 +00:00

path.js

path: indicate index of wrong resolve() parameter

2023-05-04 14:03:20 +00:00

perf_hooks.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

process.js

…

punycode.js

lib: runtime deprecate punycode

2023-04-03 17:47:28 +00:00

querystring.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

readline.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

repl.js

repl: display dynamic import variant in static import error messages

2023-06-11 08:10:39 +00:00

stream.js

stream: add setter & getter for default highWaterMark (#46929)

2023-03-29 20:02:10 +02:00

string_decoder.js

tools: fix jsdoc lint

2023-05-02 00:48:20 +00:00

sys.js

…

test.js

…

timers.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

tls.js

tls: add trailing commas in source files

2023-02-22 01:22:23 +01:00

trace_events.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

tty.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00

url.js

url: clean vertical alignment of docs

2023-05-18 20:03:27 +00:00

util.js

tools: fix jsdoc lint

2023-05-02 00:48:20 +00:00

v8.js

src: make AliasedBuffers in the binding data weak

2023-04-20 03:28:35 +00:00

vm.js

vm,lib: refactor microtaskQueue assignment logic

2023-05-13 22:17:05 +08:00

wasi.js

wasi: make returnOnExit true by default

2023-04-11 16:35:52 -04:00

worker_threads.js

src: throw DataCloneError on transfering untransferable objects

2023-05-05 11:22:42 +00:00

zlib.js

lib: add trailing commas to all public core modules

2023-02-28 12:10:24 +01:00