deno-fs-permissions-bypass

Just a proof of concept for a security issue in deno.

This includes slightly modified code from deno, base64-js, and flatbuffers.

usage is just like std/examples/cat.ts example: deno read-any-file.ts test.txt

The key difference here is that deno won't ask for permission before allowing this read.

Name		Name	Last commit message	Last commit date
Latest commit History 4 Commits
README.md		README.md
base64.js		base64.js
dispatch.ts		dispatch.ts
dom_types.ts		dom_types.ts
errors.ts		errors.ts
fb-types.ts		fb-types.ts
flatbuffers-lib.js		flatbuffers-lib.js
flatbuffers.ts		flatbuffers.ts
libdeno.ts		libdeno.ts
msg_generated.ts		msg_generated.ts
read-any-file.ts		read-any-file.ts
test.txt		test.txt
text_encoding.ts		text_encoding.ts
types.ts		types.ts
util.ts		util.ts
window.ts		window.ts

Provide feedback