diff options
| author | Shelley Vohr <shelley.vohr@gmail.com> | 2019-10-23 11:06:57 -0700 |
|---|---|---|
| committer | Shelley Vohr <shelley.vohr@gmail.com> | 2019-10-28 08:15:08 -0700 |
| commit | 1d89c5d1e16d67962db2735efc601b48bd78255d (patch) | |
| tree | d6f2ec8fca92b22d178fab89428d0a873fc47316 /doc/node.1 | |
| parent | 511f67bcb42b59c9a3a3efab8fed578db100afe1 (diff) | |
| download | android-node-v8-1d89c5d1e16d67962db2735efc601b48bd78255d.tar.gz android-node-v8-1d89c5d1e16d67962db2735efc601b48bd78255d.tar.bz2 android-node-v8-1d89c5d1e16d67962db2735efc601b48bd78255d.zip | |
cli: whitelist new V8 flag in NODE_OPTIONS
Explicitly whitelists --disallow-code-generation-from-strings in
NODE_OPTIONS as a new V8 flag. This flag prevents strings like eval()
from performing code generation.
PR-URL: https://github.com/nodejs/node/pull/30094
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
Reviewed-By: Gus Caplan <me@gus.host>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Diffstat (limited to 'doc/node.1')
| -rw-r--r-- | doc/node.1 | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/node.1 b/doc/node.1 index 9af077fc96..e9b7855b9b 100644 --- a/doc/node.1 +++ b/doc/node.1 @@ -100,6 +100,11 @@ The default is File name of the V8 CPU profile generated with .Fl -cpu-prof . +.It Fl -disallow-code-generation-from-strings +Make built-in language features like `eval` and `new Function` that generate +code from strings throw an exception instead. This does not affect the Node.js +`vm` module. +. .It Fl -enable-fips Enable FIPS-compliant crypto at startup. Requires Node.js to be built with |