admin/n8n-enterprise-unlocked
1
0
Fork 0
mirror of https://github.com/Abdulazizzn/n8n-enterprise-unlocked.git synced 2025-12-17 01:56:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(core): Prevent prototype pollution in task runner (#12588)

Browse Source
This commit is contained in:
Iván Ovejero
2025-01-15 09:51:42 +01:00
committed by GitHub
parent 674ba3c59a
commit bdf266cf55
5 changed files with 99 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
packages/cli/src/task-runners/task-runner-process.ts
View File

@@ -106,9 +106,13 @@ export class TaskRunnerProcess extends TypedEmitter<TaskRunnerProcessEventMap> {
startNode(grantToken: string, taskBrokerUri: string) {
const startScript = require.resolve('@n8n/task-runner/start');
return spawn('node', ['--disallow-code-generation-from-strings', startScript], {
env: this.getProcessEnvVars(grantToken, taskBrokerUri),
});
return spawn(
'node',
['--disallow-code-generation-from-strings', '--disable-proto=delete', startScript],
{
env: this.getProcessEnvVars(grantToken, taskBrokerUri),
},
);
}
@OnShutdown()