endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES
Apache License 2.0
829 stars 72 forks source link

Add version number to SES lockdown shim #1853

Closed leotm closed 11 months ago

leotm commented 1 year ago

What is the Problem Being Solved?

After downloading a lockdown shim, it's hard to remember which version it is later

e.g. curl -O https://npmfs.com/download/ses/0.18.8/dist/ses.cjs but it's difficult to tell the version purely from inspecting the file

Description of the Design

Start the bundled lockdown file with a comment containing the version number

Security Considerations

Scaling Considerations

Test Plan

npm run build
head dist/ses.cjs # ensure correct version present as comment on line 1
npm run test

Upgrade Considerations