diff options
Diffstat (limited to 'tests/specs/run/proto_exploit')
-rw-r--r-- | tests/specs/run/proto_exploit/__test__.jsonc | 4 | ||||
-rw-r--r-- | tests/specs/run/proto_exploit/proto_exploit.js | 5 | ||||
-rw-r--r-- | tests/specs/run/proto_exploit/proto_exploit.js.out | 2 |
3 files changed, 11 insertions, 0 deletions
diff --git a/tests/specs/run/proto_exploit/__test__.jsonc b/tests/specs/run/proto_exploit/__test__.jsonc new file mode 100644 index 000000000..218f38654 --- /dev/null +++ b/tests/specs/run/proto_exploit/__test__.jsonc @@ -0,0 +1,4 @@ +{ + "args": "run proto_exploit.js", + "output": "proto_exploit.js.out" +} diff --git a/tests/specs/run/proto_exploit/proto_exploit.js b/tests/specs/run/proto_exploit/proto_exploit.js new file mode 100644 index 000000000..8bd22cfe5 --- /dev/null +++ b/tests/specs/run/proto_exploit/proto_exploit.js @@ -0,0 +1,5 @@ +const payload = `{ "__proto__": null }`; +const obj = {}; +console.log("Before: " + obj); +Object.assign(obj, JSON.parse(payload)); +console.log("After: " + obj); diff --git a/tests/specs/run/proto_exploit/proto_exploit.js.out b/tests/specs/run/proto_exploit/proto_exploit.js.out new file mode 100644 index 000000000..fde881dc5 --- /dev/null +++ b/tests/specs/run/proto_exploit/proto_exploit.js.out @@ -0,0 +1,2 @@ +Before: [object Object] +After: [object Object] |