@n8n/vm2 - npm Package Compare versions

Comparing version 3.9.22 to 3.9.23

lib/setup-sandbox.js

@@ -13,3 +13,2 @@ /* global host, bridge, data, context */
 	Function: localFunction,
-	Promise: localPromise,
 	eval: localEval
@@ -33,8 +32,3 @@ } = global;
 
-const PromiseCtor = Promise;
-const speciesSymbol = Symbol.species;
 const localReflectApply = (target, thisArg, args) => {
-	if (thisArg instanceof PromiseCtor && thisArg.constructor[speciesSymbol] !== PromiseCtor) {
-		throw new Error('Sandbox escape attempt blocked');
-	}
 	return apply(target, thisArg, args);
@@ -78,2 +72,3 @@ };
 
+class localPromise extends global.Promise {}
 Object.defineProperties(global, {
@@ -85,2 +80,3 @@ global: {value: global, writable: true, configurable: true, enumerable: true},
 	Error: {value: LocalError},
+	Promise: {value: localPromise},
 	Proxy: {value: undefined}
@@ -546,2 +542,4 @@ });
 
+	Object.freeze(localPromise);
+	Object.freeze(PromisePrototype);
 }
@@ -548,0 +546,0 @@

package.json

@@ -12,3 +12,3 @@ {
   ],
-  "version": "3.9.22",
+  "version": "3.9.23",
   "main": "index.js",
@@ -15,0 +15,0 @@ "sideEffects": false,

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

223416

decreased by-0.04%

Lines of code

5800

decreased by-0.03%

No dependency changes