docs: clarify that WASM is trusted

[mcollina]

This clarifies that WASM is trusted, too.

[nodejs-github-bot]

Review requested:

• @nodejs/tsc

[aduh95]

Can you move that to the point number 3 The code it is asked to run?

node/SECURITY.md

Lines 114 to 117 in d1b8b5c

	3. The code it is asked to run, including JavaScript and native code, even if
	said code is dynamically loaded, e.g., all dependencies installed from the
	npm registry.
	The code run inherits all the privileges of the execution user.

Also, the subsystem should be doc:, not docs:

[mhdawson]

LGTM

[aduh95]

Nit: Oxford comma

Suggested change

	3. The code it is asked to run, including JavaScript, WASM and native code, even
	3. The code it is asked to run, including JavaScript, WASM, and native code, even

[nodejs-github-bot]

Commit Queue failed

- Loading data for nodejs/node/pull/56345
✔  Done loading data for nodejs/node/pull/56345
----------------------------------- PR info ------------------------------------
Title      docs: clarify that WASM is trusted (#56345)
Author     Matteo Collina <[email protected]> (@mcollina)
Branch     mcollina:clarify-that-wasm-is-truested -> nodejs:main
Labels     doc, author ready
Commits    2
 - doc: clarify that WASM is trusted
 - fixup
Committers 1
 - Matteo Collina <[email protected]>
PR-URL: https://github.com/nodejs/node/pull/56345
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
------------------------------ Generated metadata ------------------------------
PR-URL: https://github.com/nodejs/node/pull/56345
Reviewed-By: Michael Dawson <[email protected]>
Reviewed-By: Marco Ippolito <[email protected]>
Reviewed-By: Ulises Gascón <[email protected]>
Reviewed-By: Luigi Pinca <[email protected]>
Reviewed-By: Rafael Gonzaga <[email protected]>
Reviewed-By: Antoine du Hamel <[email protected]>
--------------------------------------------------------------------------------
   ℹ  This PR was created on Mon, 23 Dec 2024 10:41:22 GMT
   ✔  Approvals: 6
   ✔  - Michael Dawson (@mhdawson) (TSC): https://github.com/nodejs/node/pull/56345#pullrequestreview-2520769508
   ✔  - Marco Ippolito (@marco-ippolito) (TSC): https://github.com/nodejs/node/pull/56345#pullrequestreview-2520784482
   ✔  - Ulises Gascón (@UlisesGascon): https://github.com/nodejs/node/pull/56345#pullrequestreview-2520941099
   ✔  - Luigi Pinca (@lpinca): https://github.com/nodejs/node/pull/56345#pullrequestreview-2521093391
   ✔  - Rafael Gonzaga (@RafaelGSS) (TSC): https://github.com/nodejs/node/pull/56345#pullrequestreview-2521135655
   ✔  - Antoine du Hamel (@aduh95) (TSC): https://github.com/nodejs/node/pull/56345#pullrequestreview-2521816923
   ✔  Last GitHub CI successful
   ℹ  Green GitHub CI is sufficient
--------------------------------------------------------------------------------
   ✔  No git cherry-pick in progress
   ✔  No git am in progress
   ✔  No git rebase in progress
--------------------------------------------------------------------------------
- Bringing origin/main up to date...
From https://github.com/nodejs/node
 * branch                  main       -> FETCH_HEAD
✔  origin/main is now up-to-date
- Downloading patch for 56345
From https://github.com/nodejs/node
 * branch                  refs/pull/56345/merge -> FETCH_HEAD
✔  Fetched commits as d00710dd8dcb..8ced8f4821f3
--------------------------------------------------------------------------------
[main 47c0b2b8d6] doc: clarify that WASM is trusted
 Author: Matteo Collina <[email protected]>
 Date: Mon Dec 23 11:40:47 2024 +0100
 1 file changed, 3 insertions(+), 3 deletions(-)
[main 0fd65aecb1] fixup
 Author: Matteo Collina <[email protected]>
 Date: Tue Dec 24 11:33:24 2024 +0100
 1 file changed, 1 insertion(+), 1 deletion(-)
   ✔  Patches applied
There are 2 commits in the PR. Attempting autorebase.
Rebasing (2/4)
Executing: git node land --amend --yes
--------------------------------- New Message ----------------------------------
doc: clarify that WASM is trusted
Signed-off-by: Matteo Collina <[email protected]>

PR-URL: #56345

Reviewed-By: Michael Dawson <[email protected]>

Reviewed-By: Marco Ippolito <[email protected]>

Reviewed-By: Ulises Gascón <[email protected]>

Reviewed-By: Luigi Pinca <[email protected]>

Reviewed-By: Rafael Gonzaga <[email protected]>

Reviewed-By: Antoine du Hamel <[email protected]>
[detached HEAD a9111ce812] doc: clarify that WASM is trusted

Author: Matteo Collina <[email protected]>

Date: Mon Dec 23 11:40:47 2024 +0100

1 file changed, 3 insertions(+), 3 deletions(-)

Rebasing (3/4)

Rebasing (4/4)

Executing: git node land --amend --yes

--------------------------------- New Message ----------------------------------

fixup
Signed-off-by: Matteo Collina <[email protected]>

PR-URL: #56345

Reviewed-By: Michael Dawson <[email protected]>

Reviewed-By: Marco Ippolito <[email protected]>

Reviewed-By: Ulises Gascón <[email protected]>

Reviewed-By: Luigi Pinca <[email protected]>

Reviewed-By: Rafael Gonzaga <[email protected]>

Reviewed-By: Antoine du Hamel <[email protected]>
[detached HEAD 0a6dc084df] fixup

Author: Matteo Collina <[email protected]>

Date: Tue Dec 24 11:33:24 2024 +0100

1 file changed, 1 insertion(+), 1 deletion(-)

Successfully rebased and updated refs/heads/main.
ℹ  Add commit-queue-squash label to land the PR as one commit, or commit-queue-rebase to land as separate commits.

https://github.com/nodejs/node/actions/runs/12492304537

[nodejs-github-bot]

Landed in 7ca7531