nodejs
diff --git a/Collapse file
‎lib/fs.js‎
Copy file name to clipboardExpand all lines: lib/fs.js
+1-2Lines changed: 1 addition & 2 deletions b/Collapse file
‎lib/fs.js‎
Copy file name to clipboardExpand all lines: lib/fs.js
+1-2Lines changed: 1 addition & 2 deletions
diff --git a/Collapse file
‎test/fixtures/permission/fs-read.js‎
Copy file name to clipboardExpand all lines: test/fixtures/permission/fs-read.js
+8-1Lines changed: 8 additions & 1 deletion b/Collapse file
‎test/fixtures/permission/fs-read.js‎
Copy file name to clipboardExpand all lines: test/fixtures/permission/fs-read.js
+8-1Lines changed: 8 additions & 1 deletion
@@ -108,7 +108,6 @@ const {
   getValidatedPath,
   getValidMode,
   handleErrorFromBinding,
-  possiblyTransformPath,
   preprocessSymlinkDestination,
   Stats,
   getStatFsFromBinding,
@@ -2451,7 +2450,7 @@ function watch(filename, options, listener) {
 
   let watcher;
   const watchers = require('internal/fs/watchers');
-  const path = possiblyTransformPath(filename);
+  const path = getValidatedPath(filename);
   // TODO(anonrig): Remove non-native watcher when/if libuv supports recursive.
   // As of November 2022, libuv does not support recursive file watch on all platforms,
   // e.g. Linux due to the limitations of inotify.
 
@@ -265,6 +265,13 @@ const regularFile = __filename;
     permission: 'FileSystemRead',
     resource: path.toNamespacedPath(blockedFile),
   }));
+  assert.throws(() => {
+    fs.watch(blockedFileURL, () => {});
+  }, common.expectsError({
+    code: 'ERR_ACCESS_DENIED',
+    permission: 'FileSystemRead',
+    resource: path.toNamespacedPath(blockedFile),
+  }));
 
   // doesNotThrow
   fs.readdir(allowedFolder, (err) => {
@@ -353,4 +360,4 @@ const regularFile = __filename;
     permission: 'FileSystemRead',
     resource: path.toNamespacedPath(blockedFile),
   }));
-}
+}