fix,win: remove global paths from node module lookup (#19)

Co-authored-by: deepak1556 <[email protected]>

Author: Deepak Mohan

src/bootstrap-node.ts

@@ -11,6 +11,7 @@ import type { IProductConfiguration } from './vs/base/common/product.js';
 
 const require = createRequire(import.meta.url);
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const isWindows = process.platform === 'win32';
 
 // increase number of stack frames(from 10, https://github.com/v8/v8/wiki/Stack-Trace-API)
 Error.stackTraceLimit = 100;
@@ -97,6 +98,35 @@ export function removeGlobalNodeJsModuleLookupPaths(): void {
 
 		return paths;
 	};
+
+	const originalNodeModulePaths = Module._nodeModulePaths;
+	Module._nodeModulePaths = function (from: string): string[] {
+		let paths: string[] = originalNodeModulePaths(from);
+		if (!isWindows) {
+			return paths;
+		}
+
+		// On Windows, remove drive(s) and users' home directory from search paths,
+		// UNLESS 'from' is explicitly set to one of those.
+		const isDrive = (p: string) => p.length >= 3 && p.endsWith(':\\');
+
+		if (!isDrive(from)) {
+			paths = paths.filter(p => !isDrive(path.dirname(p)));
+		}
+
+		if (process.env.HOMEDRIVE && process.env.HOMEPATH) {
+			const userDir = path.dirname(path.join(process.env.HOMEDRIVE, process.env.HOMEPATH));
+
+			const isUsersDir = (p: string) => path.relative(p, userDir).length === 0;
+
+			// Check if 'from' is the same as 'userDir'
+			if (!isUsersDir(from)) {
+				paths = paths.filter(p => !isUsersDir(path.dirname(p)));
+			}
+		}
+
+		return paths;
+	};
 }
 
 /**

src/server-main.ts

@@ -12,7 +12,7 @@ import * as readline from 'readline';
 import { performance } from 'perf_hooks';
 import { fileURLToPath } from 'url';
 import minimist from 'minimist';
-import { devInjectNodeModuleLookupPath } from './bootstrap-node.js';
+import { devInjectNodeModuleLookupPath, removeGlobalNodeJsModuleLookupPaths } from './bootstrap-node.js';
 import { bootstrapESM } from './bootstrap-esm.js';
 import { resolveNLSConfiguration } from './vs/base/node/nls.js';
 import { product } from './bootstrap-meta.js';
@@ -247,6 +247,9 @@ async function loadCode(nlsConfiguration: INLSConfiguration) {
 		delete process.env['VSCODE_DEV_INJECT_NODE_MODULE_LOOKUP_PATH'];
 	}
 
+	// Remove global paths from the node module lookup (node.js only)
+	removeGlobalNodeJsModuleLookupPaths();
+
 	// Bootstrap ESM
 	await bootstrapESM();