diff options
| author | Luca Casonato <hello@lcas.dev> | 2024-05-23 00:03:35 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-05-23 00:03:35 +0200 |
| commit | 971f09abe486185247e1faf4e8d1419ba2506b8d (patch) | |
| tree | 3ed0cf608116ad06e88a87552333e930824cc790 /ext/http/02_websocket.ts | |
| parent | 6c167c64d61ecfc912dc1b68d300f02aa3677235 (diff) | |
fix(runtime): use more null proto objects (#23921)
This is a primordialization effort to improve resistance against users
tampering with the global `Object` prototype.
---------
Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>
Diffstat (limited to 'ext/http/02_websocket.ts')
| -rw-r--r-- | ext/http/02_websocket.ts | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ext/http/02_websocket.ts b/ext/http/02_websocket.ts index 073929961..21f403bff 100644 --- a/ext/http/02_websocket.ts +++ b/ext/http/02_websocket.ts @@ -37,7 +37,7 @@ const _ws = Symbol("[[associated_ws]]"); const websocketCvf = buildCaseInsensitiveCommaValueFinder("websocket"); const upgradeCvf = buildCaseInsensitiveCommaValueFinder("upgrade"); -function upgradeWebSocket(request, options = {}) { +function upgradeWebSocket(request, options = { __proto__: null }) { const inner = toInnerRequest(request); const upgrade = request.headers.get("upgrade"); const upgradeHasWebSocketOption = upgrade !== null && |