chore: handle network permission in node25

Author: Kikobeats

src/index.js

@@ -15,9 +15,9 @@ const createError = ({ name, message, ...props }) => {
   return error
 }
 
-const [major] = process.version.slice(1).split('.').map(Number)
+const [nodeMajor] = process.version.slice(1).split('.').map(Number)
 
-const PERMISSION_FLAG = major >= 24 ? '--permission' : '--experimental-permission'
+const PERMISSION_FLAG = nodeMajor >= 24 ? '--permission' : '--experimental-permission'
 
 const flags = ({ memory }) => {
   const flags = ['--disable-warning=ExperimentalWarning', PERMISSION_FLAG]
@@ -77,9 +77,15 @@ module.exports = (snippet, { tmpdir, timeout, memory, throwError = true } = {})
       }
 
       if (error.code === 'ERR_ACCESS_DENIED') {
+        const permission = error.permission
+          ? error.permission
+          : error.message.includes('getaddrinfo')
+            ? 'network'
+            : undefined
+
         throw createError({
           name: 'PermissionError',
-          message: `Access to '${error.permission}' has been restricted`,
+          message: `Access to '${permission}' has been restricted`,
           profiling: { duration: duration() }
         })
       }

test/error.js

@@ -4,6 +4,8 @@ const test = require('ava')
 
 const isolatedFunction = require('..')
 
+const [nodeMajor] = process.version.slice(1).split('.').map(Number)
+
 test('throw an error if snippet is not a function or string', t => {
   t.throws(
     () => {
@@ -139,3 +141,40 @@ test('handle child process', async t => {
     t.is(error.message, "Access to 'ChildProcess' has been restricted")
   }
 })
+;(nodeMajor >= 25 ? test : test.only)('handle network access', async t => {
+  {
+    const [fn, cleanup] = isolatedFunction(async () => {
+      function doFetch (url) {
+        return new Promise((resolve, reject) => {
+          const req = require('node:http').get(url, res => {
+            let data = ''
+
+            res.on('data', chunk => {
+              data += chunk
+            })
+
+            res.on('end', () => {
+              resolve({
+                statusCode: res.statusCode,
+                headers: res.headers,
+                body: data
+              })
+            })
+          })
+
+          req.on('error', reject)
+        })
+      }
+
+      const { statusCode } = await doFetch('http://example.com')
+      return statusCode
+    })
+
+    t.teardown(cleanup)
+
+    const error = await t.throwsAsync(fn())
+    console.log('error', error)
+
+    t.is(error.message, "Access to 'network' has been restricted")
+  }
+})