deno/tests/specs/permission/path_not_permitted/__test__.jsonc

{
  "tempDir": true,
  "envs": {
    "LD_LIBRARY_PATH": "",
    "LD_PRELOAD": "",
    "DYLD_FALLBACK_LIBRARY_PATH": ""
  },
  "args": "run -A main.ts",
  "output": "main.out"
}
fix: lock down allow-run permissions more (#25370) `--allow-run` even with an allow list has essentially been `--allow-all`... this locks it down more. 1. Resolves allow list for `--allow-run=` on startup to an absolute path, then uses these paths when evaluating if a command can execute. Also, adds these paths to `--deny-write` 1. Resolves the environment (cwd and env vars) before evaluating permissions and before executing a command. Then uses this environment to evaluate the permissions and then evaluate the command. 2024-09-04 14:51:24 +02:00			`{`
			`"tempDir": true,`
			`"envs": {`
			`"LD_LIBRARY_PATH": "",`
			`"LD_PRELOAD": "",`
			`"DYLD_FALLBACK_LIBRARY_PATH": ""`
			`},`
			`"args": "run -A main.ts",`
			`"output": "main.out"`
			`}`