[ VM ] Updated standalone VM to display message about --disable-service-auth-codes when --help --verbose is provided.
Change-Id: I88d3215ccf567a8c965298b5c9c3f7604149e9f1
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/100264
Reviewed-by: Kevin Moore <kevmoo@google.com>
Commit-Queue: Ben Konyi <bkonyi@google.com>
diff --git a/runtime/bin/main_options.cc b/runtime/bin/main_options.cc
index 42fa0b5..0826fa1 100644
--- a/runtime/bin/main_options.cc
+++ b/runtime/bin/main_options.cc
@@ -192,9 +192,15 @@
" enables tracing of library and script loading\n"
"\n"
"--enable-vm-service[=<port>[/<bind-address>]]\n"
-" enables the VM service and listens on specified port for connections\n"
+" Enables the VM service and listens on specified port for connections\n"
" (default port number is 8181, default bind address is localhost).\n"
"\n"
+"--disable-service-auth-codes\n"
+" Disables the requirement for an authentication code to communicate with\n"
+" the VM service. Authentication codes help protect against CSRF attacks,\n"
+" so it is not recommended to disable them unless behind a firewall on a\n"
+" secure device.\n"
+"\n"
"--root-certs-file=<path>\n"
" The path to a file containing the trusted root certificates to use for\n"
" secure socket connections.\n"