Function getAllowedSecrets

js/node_helper.js:12–23

* Determine which secrets a module is allowed to restore. A module may only * restore the `**SECRET_***` placeholders that appear in its own config — the * exact inverse of how the config is redacted before it is sent to the browser. * @param {string} moduleName - Name of the module. * @returns

(moduleName)

 * @returns {Set<string>} The secret names the module may restore.
 */
function getAllowedSecrets (moduleName) {
	const modules = global.configRedacted?.modules || [];
	const moduleConfig = modules.find((m) => m.module === moduleName);
	const allowed = new Set();
	if (moduleConfig) {
		// Stringify the config to easily find all expected **SECRET_*** placeholders
		for (const [, secretName] of JSON.stringify(moduleConfig).matchAll(/\*\*(SECRET_[^*]+)\*\*/g)) {
			allowed.add(secretName);
		}
	}
	return allowed;
}

class NodeHelper {
	init () {