-
Notifications
You must be signed in to change notification settings - Fork 30k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: clarify that WASM is trusted #56345
base: main
Are you sure you want to change the base?
Conversation
Review requested:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you move that to the point number 3 The code it is asked to run
?
Lines 114 to 117 in d1b8b5c
3. The code it is asked to run, including JavaScript and native code, even if | |
said code is dynamically loaded, e.g., all dependencies installed from the | |
npm registry. | |
The code run inherits all the privileges of the execution user. |
Also, the subsystem should be doc:
, not docs:
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Signed-off-by: Matteo Collina <[email protected]>
ac86b0d
to
e4cca8c
Compare
Signed-off-by: Matteo Collina <[email protected]>
@@ -111,8 +111,8 @@ lead to a loss of confidentiality, integrity, or availability. | |||
1. The developers and infrastructure that runs it. | |||
2. The operating system that Node.js is running under and its configuration, | |||
along with anything under control of the operating system. | |||
3. The code it is asked to run, including JavaScript and native code, even if | |||
said code is dynamically loaded, e.g., all dependencies installed from the | |||
3. The code it is asked to run, including JavaScript, WASM and native code, even |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit: Oxford comma
3. The code it is asked to run, including JavaScript, WASM and native code, even | |
3. The code it is asked to run, including JavaScript, WASM, and native code, even |
This clarifies that WASM is trusted, too.