From 8da1bb5024934f990a649053746aeb7c5a3a0eff Mon Sep 17 00:00:00 2001 From: Matteo Collina Date: Wed, 4 Nov 2026 15:08:16 +0100 Subject: [PATCH] doc: add Windows archive install permissions note --- apps/site/pages/en/download/alpha.mdx | 6 ++++++ apps/site/pages/en/download/current.mdx | 6 ++++++ apps/site/pages/en/download/index.mdx | 6 ++++++ 3 files changed, 18 insertions(+) diff --git a/apps/site/pages/en/download/alpha.mdx b/apps/site/pages/en/download/alpha.mdx index cc435c8af1e41..faad6a120030d 100644 --- a/apps/site/pages/en/download/alpha.mdx +++ b/apps/site/pages/en/download/alpha.mdx @@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel Learn how to verify signed SHASUMS. +On Windows, use the Windows Installer (`.msi`) for system-wide installations +when possible. If you use a `.zip` or `.7z` archive for a system-wide +installation, extract Node.js to a directory that is not writable by untrusted +users. Avoid leaving the installation directory with permissions that allow +other authenticated users to create or modify files in that directory. + Looking for Node.js source? Download a signed Node.js source tarball. Check out our nightly binaries or diff --git a/apps/site/pages/en/download/current.mdx b/apps/site/pages/en/download/current.mdx index cc435c8af1e41..faad6a120030d 100644 --- a/apps/site/pages/en/download/current.mdx +++ b/apps/site/pages/en/download/current.mdx @@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel Learn how to verify signed SHASUMS. +On Windows, use the Windows Installer (`.msi`) for system-wide installations +when possible. If you use a `.zip` or `.7z` archive for a system-wide +installation, extract Node.js to a directory that is not writable by untrusted +users. Avoid leaving the installation directory with permissions that allow +other authenticated users to create or modify files in that directory. + Looking for Node.js source? Download a signed Node.js source tarball. Check out our nightly binaries or diff --git a/apps/site/pages/en/download/index.mdx b/apps/site/pages/en/download/index.mdx index 9767b0d9bda2f..b6aaff732b9d0 100644 --- a/apps/site/pages/en/download/index.mdx +++ b/apps/site/pages/en/download/index.mdx @@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel Learn how to verify signed SHASUMS. +On Windows, use the Windows Installer (`.msi`) for system-wide installations +when possible. If you use a `.zip` or `.7z` archive for a system-wide +installation, extract Node.js to a directory that is not writable by untrusted +users. Avoid leaving the installation directory with permissions that allow +other authenticated users to create or modify files in that directory. + Looking for Node.js source? Download a signed Node.js source tarball. Check out our nightly binaries or