Skip to content

Commit

Permalink
doc: use stronger language about security of vm
Browse files Browse the repository at this point in the history
PR-URL: #23198
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Ujjwal Sharma <usharma1998@gmail.com>
Reviewed-By: John-David Dalton <john.david.dalton@gmail.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Ruben Bridgewater <ruben@bridgewater.de>
  • Loading branch information
devsnek authored and targos committed Oct 5, 2018
1 parent 2da6f62 commit ed01b38
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions doc/api/vm.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,10 @@
<!--name=vm-->

The `vm` module provides APIs for compiling and running code within V8 Virtual
Machine contexts.
Machine contexts. **Note that the `vm` module is not a security mechanism. Do
not use it to run untrusted code**. The term "sandbox" is used throughout these
docs simply to refer to a separate context, and does not confer any security
guarantees.

JavaScript code can be compiled and run immediately or
compiled, saved, and run later.
Expand Down Expand Up @@ -40,9 +43,6 @@ console.log(sandbox.y); // 17
console.log(x); // 1; y is not defined.
```

**The vm module is not a security mechanism. Do not use it to run untrusted
code**.

## Class: vm.SourceTextModule
<!-- YAML
added: v9.6.0
Expand Down

0 comments on commit ed01b38

Please sign in to comment.