endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES
Apache License 2.0
834 stars 72 forks source link

feat(ses): Lockdown reporting option #2613

Closed kriskowal closed 1 month ago

kriskowal commented 1 month ago

Closes: #2608

Description

This change introduces a "reporting" option to lockdown and repairIntrinsics that determines the means by which SES will send warnings to diagnostic tools like the web or node console, print, or nowhere at all.

Security Considerations

None

Scaling Considerations

None

Documentation Considerations

Relevant documentation added to lockdown options and NEWS.

Testing Considerations

This adjusts the existing test to use the "reporting": "console" option, since it already verifies that behavior and consequently is suitable for verifying the web behavior while standing on Node.js.

This adds a new test that verifies that reporting with the "platform" default behavior on node generates no output on stderr and confirms the presence of expected indented and non-indented messages, while being resilient to additional intrinsics being added to the platform.

Compatibility Considerations

None.

Upgrade Considerations

None.