Skip to content

doc: clarify Worker execArgv vs Permission Model grants - #66124

Open
yunshingng wants to merge 4 commits into
nodejs:mainfrom
yunshingng:doc-worker-execargv-permission
Open

yunshingng wants to merge 4 commits into
nodejs:mainfrom
yunshingng:doc-worker-execargv-permission

Conversation

@yunshingng

Copy link
Copy Markdown

Description

Follow-up to #65359.

Rafael asked to keep the current runtime behavior and only clarify the docs.

This PR does not change src/. It states:

  • Omit execArgv: the worker keeps the parent CLI flags (--permission, --allow-* if the parent has them).
  • Explicit execArgv, including []: inheritance is replaced; Permission Model grants from the parent are not kept unless listed again.
  • That difference is intended, not a worker bypass.

Test plan

  • Docs only.

Omit execArgv: the worker keeps the parent's CLI flags, including
--permission and --allow-*.

Explicit execArgv (including []) replaces inheritance and can drop
those grants. That is intended.

Documented after nodejs#65359. No runtime change.

Refs: nodejs#65359

Signed-off-by: yunshingng <yunshingng25@gmail.com>
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added the doc Issues and PRs related to Node.js documentation. label Sep 19, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Welcome to Node.js, and thank you for your first contribution!

Before review, please take a moment to read:

Please make sure every commit is signed off. For a first pull request, GitHub Actions require collaborator approval and Jenkins CI must be started by a collaborator or triager, so an initial wait is normal.

Signed-off-by: yunshingng <yunshingng25@gmail.com>
Signed-off-by: yunshingng <yunshingng25@gmail.com>
Signed-off-by: yunshingng <yunshingng25@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

doc Issues and PRs related to Node.js documentation.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants