Skip to content

Commit 7700deb

Browse files
Update permissions.md for V8 Inspector access
Clarified that a target process does not need to run under `--permission` to open its V8 Inspector.
1 parent f5b036c commit 7700deb

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

doc/api/permissions.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -254,9 +254,9 @@ scope or any other Permission Model scope.
254254

255255
A sandboxed process running under `--permission` with no additional
256256
grants can call `process._debugProcess(pid)` to force another Node.js
257-
process to open its V8 Inspector (if the process was initialized without `--permission`)
258-
regardless of whether that target
259-
process has any permission restrictions.
257+
process to open its V8 Inspector. The target process does not need to be
258+
running under `--permission` for this to work — any Node.js process
259+
running on the same host under the same OS user can be signaled.
260260

261261
This is consistent with the Node.js threat model: Node.js trusts the
262262
OS environment in which it runs. Cross-process signaling is an

0 commit comments

Comments
 (0)