fix: serverless vm2 safe-eval
This commit is contained in:
@@ -12,9 +12,7 @@ describe.only('test safe-eval', () => {
|
||||
})
|
||||
|
||||
it('should can not access to global or process or require', () => {
|
||||
expect(() => {
|
||||
safeEval(`return global`)
|
||||
}).toThrow()
|
||||
expect(safeEval(`return global`)).toStrictEqual({})
|
||||
|
||||
expect(() => {
|
||||
safeEval(`return process`)
|
||||
@@ -25,6 +23,14 @@ describe.only('test safe-eval', () => {
|
||||
}).toThrow()
|
||||
})
|
||||
|
||||
describe('test escape', () => {
|
||||
it('case1', () => {
|
||||
expect(() =>
|
||||
safeEval(`this.constructor.constructor("return process")().exit()`),
|
||||
).toThrow()
|
||||
})
|
||||
})
|
||||
|
||||
it('should can access mocked global context', () => {
|
||||
const res = safeEval(`return global.a`, { global: { a: 1 } })
|
||||
expect(res).toBe(1)
|
||||
|
||||
Reference in New Issue
Block a user