Security: enable Node.js Permission Model for JS executor

Add --permission and --allow-fs-read=/usr/share/tb-js-executor/* to NODE_OPTIONS to restrict filesystem access and sandbox script execution.
1 week ago · acfdcf7681
1 changed files with 1 additions and 1 deletions
--- a/docker/tb-js-executor.env
+++ b/docker/tb-js-executor.env
@ -4,4 +4,4 @@ LOG_FOLDER=logs
 LOGGER_FILENAME=tb-js-executor-%DATE%.log
 DOCKER_MODE=true
 SCRIPT_BODY_TRACE_FREQUENCY=1000
-NODE_OPTIONS="--max-old-space-size=200"
+NODE_OPTIONS="--max-old-space-size=200 --permission --allow-fs-read=/usr/share/tb-js-executor/*"