Use a more complete list of built-in modules.

It is generated via much hackery, but then checked in for a given release, to avoid how this seems way too fragile to do at runtime.

Fixes #33. Inspired greatly by @robrich's work in #34.

Author: domenic

lib/builtin_modules.json

@@ -0,0 +1,42 @@
+[
+  "_debugger",
+  "_linklist",
+  "assert",
+  "buffer",
+  "child_process",
+  "console",
+  "constants",
+  "crypto",
+  "cluster",
+  "dgram",
+  "dns",
+  "domain",
+  "events",
+  "freelist",
+  "fs",
+  "http",
+  "https",
+  "module",
+  "net",
+  "os",
+  "path",
+  "punycode",
+  "querystring",
+  "readline",
+  "repl",
+  "stream",
+  "_stream_readable",
+  "_stream_writable",
+  "_stream_duplex",
+  "_stream_transform",
+  "_stream_passthrough",
+  "string_decoder",
+  "sys",
+  "timers",
+  "tls",
+  "tty",
+  "url",
+  "util",
+  "vm",
+  "zlib"
+]

lib/generate_builtin_modules_list.js

@@ -0,0 +1,22 @@
+// Stay in sloppy mode since we need `.caller` :(
+var fs = require('fs');
+var path = require('path');
+
+// Based on https://gist.github.com/Benvie/1841241
+
+var NativeModule;
+
+// Intercept NativeModule.require's call to process.moduleLoadList.push
+process.moduleLoadList.push = function newPush() {
+  // `NativeModule.require('native_module')` returns NativeModule
+  NativeModule = newPush.caller('native_module');
+
+  // Delete the interceptor and forward normal functionality
+  delete process.moduleLoadList.push;
+  return Array.prototype.push.apply(process.moduleLoadList, arguments);
+}
+
+// Force an initial call to the interceptor
+require('vm');
+
+fs.writeFileSync(path.resolve(__dirname, 'builtin_modules.json'), JSON.stringify(Object.keys(NativeModule._source), undefined, 2));

lib/sandboxed_module.js

@@ -4,14 +4,10 @@ var Module = require('module');
 var fs = require('fs');
 var vm = require('vm');
 var path = require('path');
+var builtinModules = require('./builtin_modules.json');
 var parent = module.parent;
 var globalOptions = {};
-var registeredBuiltInSourceTransformers = ['coffee']
-
-var builtinlibs = ['assert', 'buffer', 'child_process', 'cluster',
-  'crypto', 'dgram', 'dns', 'domain', 'events', 'fs', 'http', 'https','net',
-  'os', 'path', 'punycode', 'querystring', 'readline', 'stream',
-  'string_decoder','timers', 'tls', 'tty', 'url', 'util', 'vm', 'zlib', 'smalloc'];
+var registeredBuiltInSourceTransformers = ['coffee'];
 
 module.exports = SandboxedModule;
 function SandboxedModule() {
@@ -198,7 +194,7 @@ SandboxedModule.prototype._createRecursiveRequireProxy = function() {
   		//the module Module can also be used to require, so need special care
       return createFakeModuleModule();
     }
-    if (builtinlibs.indexOf(request) >=0) {
+    if (builtinModules.indexOf(request) >= 0) {
       if (request in cache) return cache[request];
       return require(request);
     }

test/fixture/builtinModules.js

@@ -0,0 +1 @@
+require('../../lib/builtin_modules.json').forEach(require);

test/integration/test-all-builtin-modules.js

@@ -0,0 +1,8 @@
+var assert = require('assert');
+var SandboxedModule = require('../..');
+
+var foo = SandboxedModule.require('../fixture/builtinModules', {
+    requires: { './bar': 'fakeBar' }
+});
+
+assert.ok(foo);