Andrey Sitnik on Nostr: If you run a Node.js server, start it with --permission and grant only what it needs: ...

If you run a Node.js server, start it with --permission and grant only what it needs:

— No network access if it only reads files
— Limit file access to the directories it actually uses

Here's how I locked down Slow Reader's server:
https://github.com/hplush/slowreader/commit/25b5730374eefd2591a8729efe219c5d64534277