Bradley Farias
7e8ad9bad8
policy: add dependencies map for resources
...
Adds a "dependencies" field to resources in policy manifest files.
In order to ease development and testing while using manifests,
wildcard values for both "dependencies" and "integrity" have been
added using the boolean value "true" in the policy manifest.
PR-URL: https://github.com/nodejs/node/pull/28767
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Jan Krems <jan.krems@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
2019-07-26 15:13:53 -05:00
Bradley Farias
6c288a7044
policy: add policy-integrity to mitigate policy tampering
...
PR-URL: https://github.com/nodejs/node/pull/28734
Reviewed-By: Gus Caplan <me@gus.host>
Reviewed-By: Richard Lau <riclau@uk.ibm.com>
Reviewed-By: Guy Bedford <guybedford@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
2019-07-20 13:24:58 -07:00
Richard Lau
bbb2134e7b
doc: fix metadata for v11.8.0 doc changes
...
Refs: 641de82404https://github.com/nodejs/node/pull/25709
Reviewed-By: Vse Mozhet Byt <vsemozhetbyt@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
2019-01-25 19:09:26 -08:00
Myles Borins
641de82404
2019-01-24, Version 11.8.0 (Current)
...
Notable Changes:
* events:
* For unhandled `error` events with an argument that is not an
`Error` object, the resulting exeption will have more information
about the argument.
https://github.com/nodejs/node/pull/25621
* child_process:
* When the `maxBuffer` option is passed, `stdout` and `stderr` will
be truncated rather than unavailable in case of an error.
https://github.com/nodejs/node/pull/24951
* policy:
* Experimental support for module integrity checks through a manifest
file is implemented now.
https://github.com/nodejs/node/pull/23834
* n-api:
* The `napi_threadsafe_function` feature is now stable.
https://github.com/nodejs/node/pull/25556
* report:
* An experimental diagnostic API for capturing process state is
available as `process.report` and through command line flags.
https://github.com/nodejs/node/pull/22712
* tls:
* `tls.connect()` takes a `timeout` option analogous to the
`net.connect()` one.
https://github.com/nodejs/node/pull/25517
* worker:
* `process.umask()` is available as a read-only function inside Worker
threads now.
https://github.com/nodejs/node/pull/25526
* An `execArgv` option that supports a subset of Node.js command line
options is supported now.
https://github.com/nodejs/node/pull/25467
PR-URL: https://github.com/nodejs/node/pull/25687
2019-01-24 20:51:40 -05:00
Anna Henningsen
ecf693697b
doc: use correct placeholder for policy docs
...
PR-URL: https://github.com/nodejs/node/pull/25627
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Vse Mozhet Byt <vsemozhetbyt@gmail.com>
2019-01-21 22:52:04 +01:00
Bradley Farias
9d5fbeb55f
policy: manifest with subresource integrity checks
...
This enables code loaded via the module system to be checked for
integrity to ensure the code loaded matches expectations.
PR-URL: https://github.com/nodejs/node/pull/23834
Reviewed-By: Guy Bedford <guybedford@gmail.com>
Reviewed-By: Vladimir de Turckheim <vlad2t@hotmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
2019-01-17 09:43:42 -06:00
