logoalt Hacker News

illright • today at 4:29 PM • 1 reply • view on HN

Node actually took that from Deno, they do have a permission model now: https://nodejs.org/api/permissions.html


Replies

zdragnar • today at 5:37 PM

From their documentation:

> It does not provide security guarantees in the presence of malicious code. Malicious code can bypass the permission model and execute arbitrary code without the restrictions imposed by the permission model.

The permission model is more of a "help developers not accidentally "rm -rf /" their local machine than it is something that helps end users.