保证
¥Guarantees
-
当使用
require()、import()或new Module()加载模块时,这些策略保证文件完整性。¥The policies guarantee the file integrity when a module is loaded using
require(),import()ornew Module(). -
重定向不会阻止通过直接访问
require.cache等方式访问 API,从而允许访问已加载的模块。策略重定向只影响到require()和import的说明符。¥Redirection does not prevent access to APIs through means such as direct access to
require.cachewhich allow access to loaded modules. Policy redirection only affects specifiers torequire()andimport. -
策略威胁模型中模块完整性的批准意味着一旦加载,它们就可以销毁甚至规避安全功能,因此环境/运行时强化是预期的。
¥The approval of the module integrity in policies threat model implies they are allowed to muck with and even circumvent security features once loaded so environmental/runtime hardening is expected.