feat(core): Make it possible to block access to environment variables

n8n-io · Jun 8, 2022 · ddb3baa · ddb3baa
1 parent a18081d
commit ddb3baa
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/packages/workflow/src/WorkflowDataProxy.ts b/packages/workflow/src/WorkflowDataProxy.ts
@@ -424,10 +424,20 @@ export class WorkflowDataProxy {
 	 * @memberof WorkflowDataGetter
 	 */
 	private envGetter() {
+		const that = this;
 		return new Proxy(
 			{},
 			{
 				get(target, name, receiver) {
+					if (process.env.N8N_BLOCK_ENV_ACCESS_IN_NODE === 'true') {
+						throw new ExpressionError('Environment variable access got disabled', {
+							causeDetailed:
+								'If you need access please contact the administrator to remove the environment variable ‘N8N_BLOCK_ENV_ACCESS_IN_NODE‘',
+							runIndex: that.runIndex,
+							itemIndex: that.itemIndex,
+							failExecution: true,
+						});
+					}
 					return process.env[name.toString()];
 				},
 			},