Recommended way to pass permissions?

[Denperidge]

Hi! In the deno.json documentation, it mentions the security risk that comes with writing down the permissions

I would like to ask if there is a recommended method to pass the permissions? I suppose adding the --allow-fs in the package.json scripts has a similar security problem.

[BlackAsLight]

I'd recommend writing them down in deno.json. There is a security risk with it, but the alternative is writing them in manually each time.

I'd recommend though either dedicating a subdirectory to where the code can read and write and not allowing it to write its own deno.json

[bartlomieju]

I would like to ask if there is a recommended method to pass the permissions?

Specifying permissions in the config file is the recommended way.