Mageia Bugzilla – Attachment 11076 Details for
Bug 21330
nodejs new security issues fixed upstream in 6.17.1
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
Log In
[x]
|
New Account
|
Forgot Password
Exploratory notes on V8 and the nodejs disposition.
notes (text/plain), 2.32 KB, created by
Len Lawrence
on 2019-06-09 18:26:46 CEST
(
hide
)
Description:
Exploratory notes on V8 and the nodejs disposition.
Filename:
MIME Type:
Creator:
Len Lawrence
Created:
2019-06-09 18:26:46 CEST
Size:
2.32 KB
patch
obsolete
>nodejs depends on a javascript engine called V8 which translates JS into C++. >Invoking: >$ node --v8-options >shows all the options which can be passed to REPL, over 400 of them. >For example: >$ node --print_code >prints all the underlying C++ and assembler code generated by any input from the user >with references to the 'crankshaft' compiler amongst megabytes of output. The following two lines generated 9.8 MB. >> var v = 7 >> v + 6 > >Use npm (node package manager) to install any extra modules needed if they are not >bundled with nodejs. > >When npm is used it creates a ~/user/.npm directory and a node_modules directory in the >current directory and populates that with all the available modules. >$ npm install express >overwrites the bundled module express locally. >.npm contains compressed package data, a jason file for each module and a _locks directory. Each jason file is replicated in node_modules. > >node_modules >âââ accepts >â  âââ HISTORY.md >â  âââ index.js >â  âââ LICENSE >â  âââ package.json >â  âââ README.md >âââ array-flatten >â  âââ array-flatten.js >â  âââ LICENSE >â  âââ package.json >â  âââ README.md >âââ body-parser >[...] > >.npm >âââ accepts >â  âââ 1.3.7 >â  âââ package >â  â  âââ package.json >â  âââ package.tgz >âââ array-flatten >â  âââ 1.1.1 >â  âââ package >â  â  âââ package.json >â  âââ package.tgz >âââ body-parser >[...] > >To use a module in a script or interactively, use this construct: >> var express = require('express') > >To install a module globally switch to root: ># npm install express -g >/usr/lib >ââ⬠express@4.17.1 > ââ⬠accepts@1.3.7 > â ââ⬠mime-types@2.1.24 > â â âââ mime-db@1.40.0 > â âââ negotiator@0.6.2 > âââ array-flatten@1.1.1 > ââ⬠body-parser@1.19.0 > â âââ bytes@3.1.0 > â ââ⬠http-errors@1.7.2 > â â âââ inherits@2.0.3 > â â âââ toidentifier@1.0.0 > â ââ⬠iconv-lite@0.4.24 > â â âââ safer-buffer@2.1.2 > â âââ raw-body@2.4.0 > âââ content-disposition@0.5.3 > âââ content-type@1.0.4 > âââ cookie@0.4.0 > âââ cookie-signature@1 > [...] >
nodejs depends on a javascript engine called V8 which translates JS into C++. Invoking: $ node --v8-options shows all the options which can be passed to REPL, over 400 of them. For example: $ node --print_code prints all the underlying C++ and assembler code generated by any input from the user with references to the 'crankshaft' compiler amongst megabytes of output. The following two lines generated 9.8 MB. > var v = 7 > v + 6 Use npm (node package manager) to install any extra modules needed if they are not bundled with nodejs. When npm is used it creates a ~/user/.npm directory and a node_modules directory in the current directory and populates that with all the available modules. $ npm install express overwrites the bundled module express locally. .npm contains compressed package data, a jason file for each module and a _locks directory. Each jason file is replicated in node_modules. node_modules âââ accepts â  âââ HISTORY.md â  âââ index.js â  âââ LICENSE â  âââ package.json â  âââ README.md âââ array-flatten â  âââ array-flatten.js â  âââ LICENSE â  âââ package.json â  âââ README.md âââ body-parser [...] .npm âââ accepts â  âââ 1.3.7 â  âââ package â  â  âââ package.json â  âââ package.tgz âââ array-flatten â  âââ 1.1.1 â  âââ package â  â  âââ package.json â  âââ package.tgz âââ body-parser [...] To use a module in a script or interactively, use this construct: > var express = require('express') To install a module globally switch to root: # npm install express -g /usr/lib ââ⬠express@4.17.1 ââ⬠accepts@1.3.7 â ââ⬠mime-types@2.1.24 â â âââ mime-db@1.40.0 â âââ negotiator@0.6.2 âââ array-flatten@1.1.1 ââ⬠body-parser@1.19.0 â âââ bytes@3.1.0 â ââ⬠http-errors@1.7.2 â â âââ inherits@2.0.3 â â âââ toidentifier@1.0.0 â ââ⬠iconv-lite@0.4.24 â â âââ safer-buffer@2.1.2 â âââ raw-body@2.4.0 âââ content-disposition@0.5.3 âââ content-type@1.0.4 âââ cookie@0.4.0 âââ cookie-signature@1 [...]
View Attachment As Raw
Actions:
View
Attachments on
bug 21330
: 11076