vm2

Fixes

https://github.com/patriksimek/vm2/commit/cfa3fc6f81be05ce9ed08a79a406ebe3b61ead3e: Fix resolver issue.

New Features

https://github.com/patriksimek/vm2/commit/dd81ff616ff528de5dc7a1cf2939de3d3701539d: Add resolver API to create a shared resolver for multiple NodeVM instances allowing to cache scripts and increase sandbox startup times.
https://github.com/patriksimek/vm2/commit/4d662e34d369b920943eee139ef60fb557666a43: Allow to pass a function to require.context which is called with the filename allowing to specify the context pre file. (Thanks to @blakebyrnes)

Fixes

https://github.com/patriksimek/vm2/commit/d88105f99752305c5b8a77b63ddee3ec86912daf: Fix issue leaking host array through Proxy. (Thanks to @arkark (Takeshi Kaneko) of GMO Cybersecurity by Ierae, Inc.)
https://github.com/patriksimek/vm2/commit/5206ba25afd86ef547a2c9d48d46ca7a9e6ec238: Fix issue with inspect being writeable. (Thanks to @arkark (Takeshi Kaneko) of GMO Cybersecurity by Ierae, Inc.)

Fixes

https://github.com/patriksimek/vm2/commit/4b22e87b102d97d45d112a0931dba1aef7eea049: Fix issue in catch block protection. (Thanks to Xion (SeungHyun Lee) of KAIST Hacking Lab.)
https://github.com/patriksimek/vm2/commit/f3db4dee4d76b19869df05ba7880d638a880edd5: Fix issue with host exceptions thrown in async functions leaking though the Promise.

Fixes

https://github.com/patriksimek/vm2/commit/24c724daa7c09f003e556d7cd1c7a8381cb985d7: Fix issue in transformer issue by reworking replacement logic. (Thanky to Xion (SeungHyun Lee) of KAIST Hacking Lab.)

Fixes

https://github.com/patriksimek/vm2/commit/d534e5785f38307b70d3aac1945260a261a94d50: Ensure no host objects are passed through to Error.prepareStackTrace. (Thanky to Seongil Wi from KAIST WSP Lab)

Fixes

https://github.com/patriksimek/vm2/commit/fe3ab68832a0df066092b0b6dcee7c7f92c6a5da: Support conditional export resolution with custom resolver (thanks to nick-klaviyo).

Fixes

https://github.com/patriksimek/vm2/commit/1c365f7b834801dcd846eb80e5d44724e66348ae: Fix typescript error in index.d.ts.

New Features

https://github.com/patriksimek/vm2/commit/81f625d55b587564a5533b30797c10872fa2d3e1: Add file system API.

Fixes

https://github.com/patriksimek/vm2/commit/442feea3525a0fe3628f08157c05a930f078e96d: Fix parsing error with object pattern in catch clause.

New Features

https://github.com/patriksimek/vm2/commit/58478a58c6f4af3c54faf4117ed5ab72d2cc8cd5: Add option require.strict to allow to load required modules in non strict mode.

Fixes

https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873: Security fix.

New Features

61d240f69cc02974be27c7582fee2defd0e6c7a8: Add uptime to process.

Fixes

e3e573fdc99a98a9c7db026e4c40474eb78cab4a: Security fix.
245da82dcdfa67031e065fd7c7a7348b5e21f2b8: Fix inspect showProxy.

Fixes

5c2e13bbf0c0518e1958a4307982a999aa181049: Bump ECMA version to 2022.

Fixes

777ffb0e021ef89444f215a69365a689d7051896: Fix access to some restricted function properties on non functions and fix findBestExtensionHandler not finding the best handler.
925e3e665acfa37dd3db0ea8e7f02b57277677e8: Try to return nicer parser errors.

Fixes

b7f794dfb3034d2173b9da957f48425adc4081c3: Custom Resolver is allowed to return undefined
568934f58cf72339a3dd2a2c578cc28550c19d27: Fixed some bugs introduced in v3.9.6
b6581b4a9cf9a4706b2967fceb5930a3de4d2ac7: Fixed root path checking

Fixes

532120d5cdec7da8225fc6242e154ebabc63fe4d: Internal restructuring and security improvements

New Features

d9af94ca3a701b9ba6283264fafeef4827786702: Added editor config

Fixes

4f0db94bfa250089d903083fcd6c6cf6cd11b8a9: Fix Promise.then not working
419806086ccbef7b9f11abbd8420d01d9fe6d18c: Fix for missing CallSite properties

New Features

4ead241540bb3d6ffcca64ce98d3b263c8f15cb4: Added strict option

Fixes

b4f6e2bd2c4a1ef52fc4483d8e35f28bc4481886: Fix breakouts in VM.
e95165b36fd07d20febd00a7b08fc8292ccc703e: Fix for bound function causes TypeError
42c7b83ce8dded5e3ae03142736dcf8306a2c2a8: Allow extending of frozen objects

Fixes

• ff894fcbd43298614bd28bc173d3446961a86913: Fix breakouts in VM.
• d12bdbdb647ba14d7b788ea6b2089df9c09028df: Fix problems when Promise object is deleted.
• 77a7681d29ca826400e9bb25b653e4112b270639: Fix oversight that write ability can change on non configurable properties.
• 8a76a08e22a76a2e5becf53f5df1306327658721: Support shebang as node does.
• 3f05f9807e0c022df75597e31f191fc5facf8a3c: Fix property typos.

New Features

• 5c2d117f2ef7aea267f4c6c748bb086f9ac1c9b4: Added vm.Script lineOffset and columnOffset options.
• 78f8be5bd1f3e0454c515e38aef3d8c2defbcae7: Allow to specify a compiler per VMScript.
• ed7215f79a5979e756766f2143f9feb23cdea887: Add option to disable async.
• d71d64782e710b8084c3eaef924e2bc60d072b92: Added jsdoc to main.js.

Fixes

• 3ba34db87a381f412ebffd2d3de2f818e3295408: Fix access to frozen or unconfigurable properties.
• fe2bdf36960b3274f1962c82cd27ee2e45f836b9: Double wrap Objects to prevent breakout via inspect.
• 8d5a8ddbace509cbaa24887f3e4095a9ca4701df: Compile now compiles VM code how it should.

Fixes

• 2049e4d34d35ff4fc9cf83390571c7b06eeb2e77: Require helpers statically in main.
• d267a32a127b1b9e7ae8b9f1cde25f0b7705403b: Fix for non-configurable property access.

New Features

• 1330a7e151140f34118eced9930cd0e9473cfac3: Added NodeVM options to pass argv and env to the process object.

Fixes

• 6f1e2c1f19f2a9c582650ebf70fe448029e46845: Fix breakouts in NodeVM.
• 58b248223e845a56f92cbd6f4fc26c735e17e4be: Made async check more robust.