Commit 12b66e6
src: whitelist new options for NODE_OPTIONS
Add --debug-*, --napi-modules
Remove --prof-process, like -p and -e, it causes node to do something
other than run node js scripts.
Backport-PR-URL: #12677
PR-URL: #13002
Reviewed-By: Refael Ackermann <refack@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>1 parent dd6ea89 commit 12b66e6
2 files changed
Lines changed: 12 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -346,15 +346,17 @@ Node options that are allowed are: | |||
| 346 | 346 | - `--enable-fips` | |
| 347 | 347 | - `--force-fips` | |
| 348 | 348 | - `--icu-data-dir` | |
| 349 | + - `--debug-brk` | ||
| 350 | + - `--debug-port` | ||
| 351 | + - `--debug` | ||
| 352 | + - `--napi-modules` | ||
| 349 | 353 | - `--no-deprecation` | |
| 350 | 354 | - `--no-warnings` | |
| 351 | 355 | - `--openssl-config` | |
| 352 | - - `--prof-process` | ||
| 353 | 356 | - `--redirect-warnings` | |
| 354 | 357 | - `--require`, `-r` | |
| 355 | 358 | - `--throw-deprecation` | |
| 356 | 359 | - `--trace-deprecation` | |
| 357 | - - `--trace-events-enabled` | ||
| 358 | 360 | - `--trace-sync-io` | |
| 359 | 361 | - `--trace-warnings` | |
| 360 | 362 | - `--track-heap-objects` | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -3787,19 +3787,23 @@ static void CheckIfAllowedInEnv(const char* exe, bool is_env, | |||
| 3787 | 3787 | ||
| 3788 | 3788 | static const char* whitelist[] = { | |
| 3789 | 3789 | // Node options | |
| 3790 | - "-r", "--require", | ||
| 3790 | + "--require", "-r", | ||
| 3791 | + "--debug", | ||
| 3792 | + "--debug-brk", | ||
| 3793 | + "--debug-port", | ||
| 3791 | 3794 | "--no-deprecation", | |
| 3795 | + "--trace-deprecation", | ||
| 3796 | + "--throw-deprecation", | ||
| 3792 | 3797 | "--no-warnings", | |
| 3798 | + "--napi-modules", | ||
| 3793 | 3799 | "--trace-warnings", | |
| 3794 | 3800 | "--redirect-warnings", | |
| 3795 | - "--trace-deprecation", | ||
| 3796 | 3801 | "--trace-sync-io", | |
| 3797 | 3802 | "--track-heap-objects", | |
| 3798 | - "--throw-deprecation", | ||
| 3799 | 3803 | "--zero-fill-buffers", | |
| 3800 | 3804 | "--v8-pool-size", | |
| 3801 | - "--use-openssl-ca", | ||
| 3802 | 3805 | "--use-bundled-ca", | |
| 3806 | + "--use-openssl-ca", | ||
| 3803 | 3807 | "--enable-fips", | |
| 3804 | 3808 | "--force-fips", | |
| 3805 | 3809 | "--openssl-config", | |
0 commit comments