test,doc: clarify wildcard usage

Follow-up: #51209
PR-URL: nodejs-private/node-private#517
Fixes: https://hackerone.com/bugs?subject=nodejs&report_id=2257156
CVE-ID: CVE-2024-21890

doc/api/permissions.md

@@ -560,6 +560,9 @@ Wildcards are supported too:
 * `--allow-fs-read=/home/test*` will allow read access to everything
   that matches the wildcard. e.g: `/home/test/file1` or `/home/test2`
 
+After passing a wildcard character (`*`) all subsequent characters will
+be ignored. For example: `/home/*.js` will work similar to `/home/*`.
+
 #### Permission Model constraints
 
 There are constraints you need to know before using this system:

test/parallel/test-permission-fs-wildcard.js

@@ -107,11 +107,15 @@ if (common.isWindows) {
         '--experimental-permission',
         '--allow-fs-read=/a/b/*',
         '--allow-fs-read=/a/b/d',
+        '--allow-fs-read=/etc/passwd.*',
+        '--allow-fs-read=/home/*.js',
         '-e',
         `
         const assert = require('assert')
         assert.ok(process.permission.has('fs.read', '/a/b/c'));
         assert.ok(!process.permission.has('fs.read', '/a/c/c'));
+        assert.ok(!process.permission.has('fs.read', '/etc/passwd'));
+        assert.ok(process.permission.has('fs.read', '/home/another-file.md'));
       `,
       ]
     );