Skip to content

lib,permission: fix dropping addon permission#64007

Open
mawalu wants to merge 1 commit into
nodejs:mainfrom
mawalu:fix-drop-addons-permission
Open

lib,permission: fix dropping addon permission#64007
mawalu wants to merge 1 commit into
nodejs:mainfrom
mawalu:fix-drop-addons-permission

Conversation

@mawalu

@mawalu mawalu commented Jun 19, 2026

Copy link
Copy Markdown

Loading addons currently does not did not perform a permission check, instead the addon permission was enforced by setting the existing allow_native_addons option.

Since permission.drop doesn't touch that option, permission.drop('addon') is currently ineffective. Still permission.has reflects the dropped state.

This PR fixes this by adding a permission check and introducing the missing test case for the addon permission.

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. needs-ci PRs that need a full CI run. labels Jun 19, 2026
@RafaelGSS RafaelGSS added the permission Issues and PRs related to the Permission Model label Jun 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c++ Issues and PRs that require attention from people who are familiar with C++. needs-ci PRs that need a full CI run. permission Issues and PRs related to the Permission Model

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants