A V8 flag to disable eval? yes please https://github.com/nodejs/node/pull/18212 …
-
So I'm imagining this is a flag that organizations may want to enable internally for security purposes.
Heh, would child_process be considered similarly? I feel it'd expose the same risks?
-
-
NODE_OPTIONS='--disable-module fs --disable-module child_process ...' XD. would be hard to prevent leaks from being able to get to these though.
-
Ehhhh. Hmm. We use new Function() to compile our new hook generation code for webpack so that it is monomorphic and optimized based on what plugins are "registered" to each hook. Would this break that?
- 8 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.