diff --git a/apps/site/pages/en/download/alpha.mdx b/apps/site/pages/en/download/alpha.mdx index cc435c8af1e41..faad6a120030d 100644 --- a/apps/site/pages/en/download/alpha.mdx +++ b/apps/site/pages/en/download/alpha.mdx @@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel Learn how to verify signed SHASUMS. +On Windows, use the Windows Installer (`.msi`) for system-wide installations +when possible. If you use a `.zip` or `.7z` archive for a system-wide +installation, extract Node.js to a directory that is not writable by untrusted +users. Avoid leaving the installation directory with permissions that allow +other authenticated users to create or modify files in that directory. + Looking for Node.js source? Download a signed Node.js source tarball. Check out our nightly binaries or diff --git a/apps/site/pages/en/download/current.mdx b/apps/site/pages/en/download/current.mdx index cc435c8af1e41..faad6a120030d 100644 --- a/apps/site/pages/en/download/current.mdx +++ b/apps/site/pages/en/download/current.mdx @@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel Learn how to verify signed SHASUMS. +On Windows, use the Windows Installer (`.msi`) for system-wide installations +when possible. If you use a `.zip` or `.7z` archive for a system-wide +installation, extract Node.js to a directory that is not writable by untrusted +users. Avoid leaving the installation directory with permissions that allow +other authenticated users to create or modify files in that directory. + Looking for Node.js source? Download a signed Node.js source tarball. Check out our nightly binaries or diff --git a/apps/site/pages/en/download/index.mdx b/apps/site/pages/en/download/index.mdx index 9767b0d9bda2f..b6aaff732b9d0 100644 --- a/apps/site/pages/en/download/index.mdx +++ b/apps/site/pages/en/download/index.mdx @@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel Learn how to verify signed SHASUMS. +On Windows, use the Windows Installer (`.msi`) for system-wide installations +when possible. If you use a `.zip` or `.7z` archive for a system-wide +installation, extract Node.js to a directory that is not writable by untrusted +users. Avoid leaving the installation directory with permissions that allow +other authenticated users to create or modify files in that directory. + Looking for Node.js source? Download a signed Node.js source tarball. Check out our nightly binaries or