Process-wide IO policy. Every load must satisfy it and the per-call options (both are checked), so an
application can lock the library down once — e.g. setIoPolicy({ allowedDirs: ['/data'], maxBytes: 50e6, denyPrivateHosts: true }) — and per-call options can only narrow it further, never widen it.
Process-wide IO policy. Every load must satisfy it and the per-call options (both are checked), so an application can lock the library down once — e.g.
setIoPolicy({ allowedDirs: ['/data'], maxBytes: 50e6, denyPrivateHosts: true })— and per-call options can only narrow it further, never widen it.