no-unsafe-alloc.md 829 B

Do not allocate uninitialized buffers in Node.js (no-unsafe-alloc)

When calling Buffer.allocUnsafe and Buffer.allocUnsafeSlow, the allocated memory is not wiped-out and can contain old, potentially sensitive data.

These methods should be used only in justifiable cases (e.g. due to performance reasons) after thorough security review.

Resources