mirror of https://github.com/zebrajr/node.git synced 2026-01-15 12:15:26 +00:00

Files

Tobias Nießen 32bcf4ca27 permission: improve path traversal protection

Always use the original implementation of pathModule.resolve. If the
application overwrites the value of pathModule.resolve with a custom
implementation, it should not have any effect on the permission model.

PR-URL: https://github.com/nodejs-private/node-private/pull/456
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
CVE-ID: CVE-2023-39331

2023-10-13 18:05:10 -03:00

assert

…

bootstrap

lib: let deps require node prefixed modules

2023-10-06 21:04:05 +00:00

child_process

…

cluster

…

console

…

crypto

crypto: account for disabled SharedArrayBuffer

2023-10-06 09:17:04 +00:00

debugger

debugger: use internal/url.URL instead of url.parse

2023-09-13 18:03:14 +00:00

dns

module, esm: jsdoc for modules files

2023-09-19 02:48:24 +00:00

events

…

permission: improve path traversal protection

2023-10-13 18:05:10 -03:00

http2

…

legacy

…

main

test_runner,test: fix flaky test-runner-cli-concurrency.js

2023-10-12 01:37:00 +00:00

modules

module: fix code injection through export names

2023-10-13 18:03:52 -03:00

per_context

lib: update usage of always on Atomics API

2023-10-10 08:26:58 +02:00

perf

perf_hooks: reduce overhead of new user timings

2023-10-05 10:47:49 +00:00

policy

policy: use tamper-proof integrity check function

2023-10-13 18:03:19 -03:00

process

esm: bypass CommonJS loader under --default-type

2023-10-05 17:57:32 +00:00

readline

readline: add paste bracket mode

2023-08-12 13:39:24 +02:00

repl

…

source_map

…

streams

stream: lazy allocate back pressure buffer

2023-10-05 20:27:45 +00:00

test

…

test_runner

test_runner: disallow array in run options

2023-10-06 20:21:15 +00:00

tls

tls: ciphers allow bang syntax

2023-10-04 07:17:35 +00:00

util

lib: reduce overhead of validateObject

2023-10-02 12:56:39 +00:00

…

vm: freeze dependencySpecifiers array

2023-10-08 18:50:53 +00:00

watch_mode

lib: use internal fileURLToPath

2023-09-10 14:57:37 +00:00

webstreams

stream: reduce overhead of transfer

2023-10-12 14:37:41 +00:00

worker

worker: protect against user mutating well-known prototypes

2023-08-23 09:06:51 +00:00

abort_controller.js

lib: reduce overhead of validateObject

2023-10-02 12:56:39 +00:00

assert.js

…

async_hooks.js

…

blob.js

lib: faster internal createBlob

2023-10-04 01:05:41 +00:00

blocklist.js

…

buffer.js

…

child_process.js

…

cli_table.js

…

constants.js

…

dgram.js

…

encoding.js

lib: reduce overhead of validateObject

2023-10-02 12:56:39 +00:00

error_serdes.js

…

errors.js

esm: unflag extensionless javascript and wasm in module scope

2023-10-03 12:31:21 +08:00

event_target.js

lib: reduce overhead of validateObject

2023-10-02 12:56:39 +00:00

file.js

…

fixed_queue.js

…

freelist.js

…

freeze_intrinsics.js

lib: update usage of always on Atomics API

2023-10-10 08:26:58 +02:00

heap_utils.js

…

histogram.js

…

http.js

…

idna.js

…

inspector_async_hook.js

…

js_stream_socket.js

net: use asserts in JS Socket Stream to catch races in future

2023-08-31 12:26:40 +00:00

linkedlist.js

…

mime.js

util: lazy parse mime parameters

2023-10-08 15:43:16 +00:00

navigator.js

errors: improve performance of instantiation

2023-09-28 09:57:38 +00:00

net.js

net: improve performance of isIPv4 and isIPv6

2023-09-13 20:01:36 +00:00

options.js

…

priority_queue.js

…

promise_hooks.js

…

querystring.js

…

readme.md

…

repl.js

…

socket_list.js

…

socketaddress.js

…

stream_base_commons.js

…

structured_clone.js

…

timers.js

…

trace_events_async_hooks.js

…

tty.js

…

url.js

errors: improve performance of instantiation

2023-09-28 09:57:38 +00:00

util.js

util: add getCwdSafe internal util fn

2023-09-22 08:37:42 +00:00

v8_prof_polyfill.js

…

v8_prof_processor.js

…

validators.js

lib: reduce overhead of validateObject

2023-10-02 12:56:39 +00:00

vm.js

lib: fix compileFunction throws range error for negative numbers

2023-10-06 14:33:46 +00:00

wasm_web_api.js

…

watchdog.js

…

webidl.js

…

worker.js

test: update flag to disable SharedArrayBuffer

2023-10-10 08:27:59 +02:00

readme.md

Internal Modules

The modules in lib/internal are intended for internal use in Node.js core only, and are not accessible with require() from user modules. These modules can be changed at any time. Reliance on these modules outside of core is not supported in any way.