'use strict'; const common = require('../common'); const assert = require('node:assert'); const { describe, it } = require('node:test'); if (process.config.variables.node_without_node_options) { common.skip('missing NODE_OPTIONS support'); } const relativePath = '../fixtures/dotenv/node-options.env'; describe('.env supports NODE_OPTIONS', () => { it('should have access to permission scope', async () => { const code = ` require('assert')(process.permission.has('fs.read')); `.trim(); const child = await common.spawnPromisified( process.execPath, [ `--env-file=${relativePath}`, '--eval', code ], { cwd: __dirname }, ); // NODE_NO_WARNINGS is set, so `stderr` should not contain // "ExperimentalWarning: Permission is an experimental feature" message // and thus be empty assert.strictEqual(child.stdout, ''); assert.strictEqual(child.stderr, ''); assert.strictEqual(child.code, 0); }); it('validate only read permissions are enabled', async () => { const code = ` require('fs').writeFileSync(require('path').join(__dirname, 'should-not-write.txt'), 'hello', 'utf-8') `.trim(); const child = await common.spawnPromisified( process.execPath, [ `--env-file=${relativePath}`, '--eval', code ], { cwd: __dirname }, ); assert.match(child.stderr, /Error: Access to this API has been restricted/); assert.match(child.stderr, /code: 'ERR_ACCESS_DENIED'/); assert.match(child.stderr, /permission: 'FileSystemWrite'/); assert.strictEqual(child.code, 1); }); it('TZ environment variable', { skip: !common.hasIntl || process.config.variables.icu_small }, async () => { const code = ` require('assert')(new Date().toString().includes('GMT-1000')) `.trim(); // Some CI environments set TZ. Since an env file doesn't override existing // environment variables, we need to delete it and then pass the env object // as the environment to spawnPromisified. const env = { ...process.env }; delete env.TZ; const child = await common.spawnPromisified( process.execPath, [ `--env-file=${relativePath}`, '--eval', code ], { cwd: __dirname, env }, ); assert.strictEqual(child.stderr, ''); assert.strictEqual(child.code, 0); }); });