Filip Skokan 9adddc552b tools: prevent lib code from reading KeyObject and CryptoKey accessors ...

Add ESLint rules that reject public KeyObject and CryptoKey accessor
reads after internal brand checks. Internal code must use the private
key helpers so it reads native-backed slots instead of user-replaceable
properties.

Add a separate rule that rejects instanceof checks against KeyObject
and CryptoKey constructors, including the global CryptoKey constructor.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/63111
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>

2026-05-08 07:10:05 +00:00

..

assert

…

dns

…

fs

…

inspector

…

internal

crypto: harden CryptoKey algorithm slots

2026-05-08 07:10:04 +00:00

path

…

readline

…

stream

stream: add stream/iter to classic stream adapters

2026-04-06 09:59:56 -07:00

test

…

timers

…

util

…

zlib

stream: add stream/iter Implementation

2026-03-27 19:55:08 -07:00

_http_agent.js

http: add http.setGlobalProxyFromEnv()

2025-12-10 16:12:28 +00:00

_http_client.js

http: harden ClientRequest options merge

2026-05-04 15:22:31 +00:00

_http_common.js

http: fix use-after-free when freeParser is called during llhttp_execute

2026-03-06 06:01:21 +00:00

_http_incoming.js

http: make req.headers have a null prototype

2026-04-25 09:28:53 +00:00

_http_outgoing.js

http: emit 'drain' on OutgoingMessage only after buffers drain

2026-05-04 16:30:52 +00:00

_http_server.js

http: emit 'drain' on OutgoingMessage only after buffers drain

2026-05-04 16:30:52 +00:00

_tls_common.js

…

_tls_wrap.js

…

assert.js

…

async_hooks.js

async_hooks: add trackPromises option to createHook()

2026-01-28 11:25:24 +00:00

buffer.js

buffer: add end parameter

2026-04-11 19:24:50 +00:00

child_process.js

lib: handle --permission-audit when propagating flags

2026-05-06 19:21:11 +00:00

cluster.js

…

console.js

…

constants.js

lib: flatten access to primordials

2019-11-25 10:28:15 +01:00

crypto.js

crypto: implement randomUUIDv7()

2026-04-05 10:12:21 +00:00

dgram.js

…

diagnostics_channel.js

diagnostics_channel: add BoundedChannel and scopes

2026-03-31 19:04:24 +00:00

dns.js

…

domain.js

repl: remove dependency on domain module

2026-03-06 15:38:36 +00:00

eslint.config_partial.mjs

tools: prevent lib code from reading KeyObject and CryptoKey accessors

2026-05-08 07:10:05 +00:00

events.js

events: avoid cloning listeners array on every emit

2026-03-29 14:53:52 +00:00

ffi.js

lib: handle --permission-audit when propagating flags

2026-05-06 19:21:11 +00:00

fs.js

fs: validate position argument before length === 0 early return

2026-04-14 22:09:32 +00:00

http2.js

…

http.js

http: add http.setGlobalProxyFromEnv()

2025-12-10 16:12:28 +00:00

https.js

http: add http.setGlobalProxyFromEnv()

2025-12-10 16:12:28 +00:00

inspector.js

inspector: initial support storage inspection

2026-01-23 14:51:48 +00:00

module.js

…

net.js

tls: forward keepAlive, keepAliveInitialDelay, noDelay to socket

2026-02-28 11:22:35 +00:00

os.js

os: freeze signals constant

2025-12-22 16:14:46 +00:00

path.js

…

perf_hooks.js

…

process.js

…

punycode.js

lib,src: isInsideNodeModules should test on the first non-internal frame

2025-12-10 13:59:35 +00:00

querystring.js

…

quic.js

quic: complete the internal implementation of QUIC

2026-05-05 19:16:19 -07:00

readline.js

…

repl.js

repl: use vm DONT_CONTEXTIFY context

2026-03-26 05:55:01 +00:00

sea.js

…

sqlite.js

sqlite: mark as release candidate

2026-02-21 16:30:23 +00:00

stream.js

stream: export namespace object from internal end-of-stream module

2026-01-23 11:47:27 +00:00

string_decoder.js

…

sys.js

…

test.js

test_runner: add getTestContext()

2026-04-01 10:09:41 +00:00

timers.js

…

tls.js

…

trace_events.js

…

tty.js

…

url.js

url: suppress warnings from url.format/url.resolve inside node_modules

2026-03-08 18:32:29 +00:00

util.js

util: colorize text with hex colors

2026-04-09 15:01:51 -04:00

v8.js

v8: add cpu profile options

2026-04-26 19:36:36 +00:00

vm.js

…

wasi.js

…

worker_threads.js

…

zlib.js

zlib: add support for brotli compression dictionary

2026-02-13 16:10:17 +00:00