Comment by larsnystrom
5 days ago
Maybe I’m just dense, but it says the fs module is fully supported, so what happens when I try to read a file from disk if the app is fully sandboxed?
5 days ago
Maybe I’m just dense, but it says the fs module is fully supported, so what happens when I try to read a file from disk if the app is fully sandboxed?
Only the current working directory will be exposed/mounted to the runtime (we do this to facilitate the DX when running local files without requiring the user to add extra flags).
As a fun exercise, you can try reading process.cwd() from edge in --safe mode and without it.
but what if I want to expose / mount more files in the sandbox?
need docs
Actually agree with you here. It will be a good idea to add docs for the CLI and the WebAssembly sandboxing