Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions runtime/fundamentals/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -247,13 +247,13 @@ or perform DNS resolution. This includes making HTTP requests, opening TCP/UDP
sockets, and listening for incoming connections on TCP or UDP.

Network access is granted using the `--allow-net` flag. This flag can be
specified with a list of IP addresses or hostnames to allow access to specific
network addresses.
specified with a list of hosts to allow access to specific network addresses. A
host can be a hostname or IP address, optionally with a port.

Hostnames do not allow subdomains, unless explicitly listed. To allow any
subdomain for a hostname, `*` can be used as wildcard for any subdomain.

Definition: `--allow-net[=<IP_OR_HOSTNAME>...]` or `-N[=<IP_OR_HOSTNAME>...]`
Definition: `--allow-net[=<HOST>...]` or `-N[=<HOST>...]`

```sh
# Allow network access
Expand All @@ -277,7 +277,7 @@ deno run --allow-net=1.1.1.1:443 script.ts
deno run --allow-net=[2606:4700:4700::1111] script.ts
```

Definition: `--deny-net[=<IP_OR_HOSTNAME>...]`
Definition: `--deny-net[=<HOST>...]`

```sh
# Allow access to network, but deny access
Expand Down
Loading