1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
# Base configuration for security sensitive environments.
# Avoid summary of object/key for rejected property operations. May be
# relevant if keys contain potentially sensitive information.
DUK_USE_PARANOID_ERRORS: true
# Disable tracebacks, minimizes attacker knowledge of call chains. Access
# to the internal error _Tracedata property provides access to all functions
# in the call chain (even when they're otherwise not visible to sandboxed
# code).
DUK_USE_TRACEBACKS: false
# Dense string hashing may be useful against accidental string hash collisions.
# This won't prevent an attacker from finding intentional collisions.
DUK_USE_STRHASH_DENSE: true
# TBD
|
