fix(core): Disallow code generation in task runner (#12522)

This commit is contained in:
Tomi Turtiainen
2025-01-09 13:27:17 +02:00
committed by GitHub
parent 46f13cfca9
commit 35b618098b
5 changed files with 23 additions and 12 deletions

View File

@@ -106,7 +106,7 @@ export class TaskRunnerProcess extends TypedEmitter<TaskRunnerProcessEventMap> {
startNode(grantToken: string, taskBrokerUri: string) {
const startScript = require.resolve('@n8n/task-runner/start');
return spawn('node', [startScript], {
return spawn('node', ['--disallow-code-generation-from-strings', startScript], {
env: this.getProcessEnvVars(grantToken, taskBrokerUri),
});
}