foster/denoland-deno
0
0
Fork 0
mirror of https://github.com/denoland/deno.git synced 2025-02-01 12:16:11 -05:00
Code Issues Packages 1 Wiki Activity

docs: specify that allow-env and allow-run can have allow lists (#10918)

Browse source
This commit is contained in:
grian 2021-06-10 13:49:24 +03:00 • committed by GitHub
parent 67690b78bd
commit fb20a6af76
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
docs/getting_started/permissions.md
View file

@ -18,8 +18,10 @@ deno run --allow-read mod.ts
The following permissions are available:
- **-A, --allow-all** Allow all permissions. This disables all security.
- **--allow-env** Allow environment access for things like getting and setting
of environment variables.
- **--allow-env=\<allow-env\>** Allow environment access for things like getting
and setting of environment variables. Since Deno 1.9, you can specify a
optional, comma-separated list of environment variables to provide an
allow-list of allowed environment variables.
- **--allow-hrtime** Allow high-resolution time measurement. High-resolution
time can be used in timing attacks and fingerprinting.
- **--allow-net=\<allow-net\>** Allow network access. You can specify an
@ -30,9 +32,11 @@ The following permissions are available:
- **--allow-read=\<allow-read\>** Allow file system read access. You can specify
an optional, comma-separated list of directories or files to provide an
allow-list of allowed file system access.
- **--allow-run** Allow running subprocesses. Be aware that subprocesses are not
run in a sandbox and therefore do not have the same security restrictions as
the deno process. Therefore, use with caution.
- **--allow-run=\<allow-run\>**Allow running subprocesses. Since Deno 1.9, You
can specify an options, comma-separated list of subprocesses to provide an
allow-list of allowed subprocesses. Be aware that subprocesses are not run in
a sandbox and therefore do not have the same security restrictions as the deno
process. Therefore, use with caution.
- **--allow-write=\<allow-write\>** Allow file system write access. You can
specify an optional, comma-separated list of directories or files to provide
an allow-list of allowed file system access.