Bugfix/update nodevm sandbox options, sanitize tablename (#3818)

* update nodevm sandbox options, sanitize tablename * sanitize file name when getFileFromStorage
2026-06-28 19:00:59 +03:00 · 2025-01-07 15:26:25 +00:00
parent 22801591da
commit 9a417bdc95
16 changed files with 269 additions and 76 deletions
@@ -106,7 +106,14 @@ class CustomDocumentLoader_DocumentLoaders implements INode {
            }
        }

-        let sandbox: any = { $input: input }
+        let sandbox: any = {
+            $input: input,
+            util: undefined,
+            Symbol: undefined,
+            child_process: undefined,
+            fs: undefined,
+            process: undefined
+        }
        sandbox['$vars'] = prepareSandboxVars(variables)
        sandbox['$flow'] = flow

@@ -128,7 +135,10 @@ class CustomDocumentLoader_DocumentLoaders implements INode {
            require: {
                external: { modules: deps },
                builtin: builtinDeps
-            }
+            },
+            eval: false,
+            wasm: false,
+            timeout: 10000
        } as any

        const vm = new NodeVM(nodeVMOptions)