Skip to content

doc: add alert on REPL from TCP socket

Rodrigo Muino Tomonari requested to merge github/fork/RafaelGSS/remove-net-to-nodesocket-example into main

Initially, I was considering removing this example:

net.createServer((socket) => {
  connections += 1;
  repl.start({
    prompt: 'Node.js via TCP socket> ',
    input: socket,
    output: socket,
  }).on('exit', () => {
    socket.end();
  });
}).listen(5001);

But it does expose some of the possibilities of Node.js REPL. So, instead of removing it from our examples, I've included an alert for its usage in production.

cc: @mcollina

Refs: https://hackerone.com/reports/2684357

Merge request reports