diff options
author | Luca Casonato <hello@lcas.dev> | 2024-05-23 00:03:35 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2024-05-23 00:03:35 +0200 |
commit | 971f09abe486185247e1faf4e8d1419ba2506b8d (patch) | |
tree | 3ed0cf608116ad06e88a87552333e930824cc790 /ext/web/09_file.js | |
parent | 6c167c64d61ecfc912dc1b68d300f02aa3677235 (diff) |
fix(runtime): use more null proto objects (#23921)
This is a primordialization effort to improve resistance against users
tampering with the global `Object` prototype.
---------
Co-authored-by: Bartek IwaĆczuk <biwanczuk@gmail.com>
Diffstat (limited to 'ext/web/09_file.js')
-rw-r--r-- | ext/web/09_file.js | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ext/web/09_file.js b/ext/web/09_file.js index b98784b94..482a14012 100644 --- a/ext/web/09_file.js +++ b/ext/web/09_file.js @@ -223,7 +223,7 @@ class Blob { * @param {BlobPart[]} blobParts * @param {BlobPropertyBag} options */ - constructor(blobParts = [], options = {}) { + constructor(blobParts = [], options = { __proto__: null }) { const prefix = "Failed to construct 'Blob'"; blobParts = webidl.converters["sequence<BlobPart>"]( blobParts, @@ -500,7 +500,7 @@ class File extends Blob { * @param {string} fileName * @param {FilePropertyBag} options */ - constructor(fileBits, fileName, options = {}) { + constructor(fileBits, fileName, options = { __proto__: null }) { const prefix = "Failed to construct 'File'"; webidl.requiredArguments(arguments.length, 2, prefix); |