Chore/Disable Available Dep By Default (#5231)

disable available dependencies by default, only allow when ALLOW_BUILTIN_DEP is set to true
This commit is contained in:
Henry Heng
2025-09-18 12:03:08 +01:00
committed by GitHub
parent fc50f2308b
commit 42152dd036
9 changed files with 18 additions and 8 deletions
+1 -1
View File
@@ -1543,7 +1543,7 @@ export const executeJavaScriptCode = async (
? defaultAllowBuiltInDep.concat(process.env.TOOL_FUNCTION_BUILTIN_DEP.split(','))
: defaultAllowBuiltInDep
const externalDeps = process.env.TOOL_FUNCTION_EXTERNAL_DEP ? process.env.TOOL_FUNCTION_EXTERNAL_DEP.split(',') : []
const deps = availableDependencies.concat(externalDeps)
const deps = process.env.ALLOW_BUILTIN_DEP === 'true' ? availableDependencies.concat(externalDeps) : externalDeps
const defaultNodeVMOptions: any = {
console: 'inherit',