Open lowlighter opened 1 year ago
Also it'd be nice to know which request path(s) caused the issue to make it easier for debugging (kind like what happens when missing permissions in run where the error message tells you what resources it tried to access)
Calling
Deno.test
with restricted--allow-run
permissions throw despite the run permissions being a subset of what is allowed:Works as expected when full
--allow-run
permissions givenExpected behaviour is that it should works in both case, as the first example does not inquire for additional permissions and therefore isn't an escalation attempt.