RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 14:27:35 +00:00
Code Issues Activity Actions

js: Use pledge()

Browse source 
It is now no longer possible to make network connections from a hijacked
js(1) :^)
This commit is contained in:
Linus Groh 2021-11-22 20:41:58 +00:00 • committed by Andreas Kling
parent cfecfbb214
commit 8fa5dc7241
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Userland/Utilities/js.cpp
View file

@ -61,6 +61,7 @@
#include <LibJS/Runtime/Value.h> #include <LibJS/Runtime/Value.h>
#include <LibLine/Editor.h> #include <LibLine/Editor.h>
#include <LibMain/Main.h> #include <LibMain/Main.h>
#include <LibSystem/Wrappers.h>
#include <fcntl.h> #include <fcntl.h>
#include <signal.h> #include <signal.h>
#include <stdio.h> #include <stdio.h>
@ -1105,6 +1106,10 @@ public:
ErrorOr<int> serenity_main(Main::Arguments arguments) ErrorOr<int> serenity_main(Main::Arguments arguments)
{ {
#ifdef __serenity__
TRY(System::pledge("stdio rpath wpath cpath tty sigaction", nullptr));
#endif
bool gc_on_every_allocation = false; bool gc_on_every_allocation = false;
bool disable_syntax_highlight = false; bool disable_syntax_highlight = false;
Vector<String> script_paths; Vector<String> script_paths;