diff options
| author | Luca Casonato <hello@lcas.dev> | 2024-05-23 00:03:35 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-05-23 00:03:35 +0200 |
| commit | 971f09abe486185247e1faf4e8d1419ba2506b8d (patch) | |
| tree | 3ed0cf608116ad06e88a87552333e930824cc790 /runtime/js/98_global_scope_shared.js | |
| parent | 6c167c64d61ecfc912dc1b68d300f02aa3677235 (diff) | |
fix(runtime): use more null proto objects (#23921)
This is a primordialization effort to improve resistance against users
tampering with the global `Object` prototype.
---------
Co-authored-by: Bartek Iwańczuk <biwanczuk@gmail.com>
Diffstat (limited to 'runtime/js/98_global_scope_shared.js')
| -rw-r--r-- | runtime/js/98_global_scope_shared.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/runtime/js/98_global_scope_shared.js b/runtime/js/98_global_scope_shared.js index e7504143e..b6e480216 100644 --- a/runtime/js/98_global_scope_shared.js +++ b/runtime/js/98_global_scope_shared.js @@ -145,7 +145,7 @@ const windowOrWorkerGlobalScope = { [webidl.brand]: core.propNonEnumerable(webidl.brand), }; -const unstableForWindowOrWorkerGlobalScope = {}; +const unstableForWindowOrWorkerGlobalScope = { __proto__: null }; unstableForWindowOrWorkerGlobalScope[unstableIds.broadcastChannel] = { BroadcastChannel: core.propNonEnumerable(broadcastChannel.BroadcastChannel), }; |