build: build ICU with ICU_NO_USER_DATA_OVERRIDE

Refs: https://hackerone.com/bugs?subject=nodejs&report_id=1625036 CVE-ID: 2023-23920 PR-URL: nodejs-private/node-private#374 Reviewed-by: Michael Dawson <[email protected]>
nodejs · Feb 14, 2023 · 97d9d55 · 97d9d55
1 parent 6ac86a4
commit 97d9d55
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/configure.py b/configure.py
@@ -1669,6 +1669,9 @@ def icu_download(path):
   # always set icu_small, node.gyp depends on it being defined.
   o['variables']['icu_small'] = b(False)
 
+  # prevent data override
+  o['defines'] += ['ICU_NO_USER_DATA_OVERRIDE']
+
   with_intl = options.with_intl
   with_icu_source = options.with_icu_source
   have_icu_path = bool(options.with_icu_path)