From 2f4be6e9441c7d5b0afd0d37dccd48d3057bcd3f Mon Sep 17 00:00:00 2001 From: Kitson Kelly Date: Sun, 15 Mar 2020 21:34:22 +1100 Subject: Remove Object.prototype.__proto__ (#4341) --- cli/tests/proto_exploit.js | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 cli/tests/proto_exploit.js (limited to 'cli/tests/proto_exploit.js') diff --git a/cli/tests/proto_exploit.js b/cli/tests/proto_exploit.js new file mode 100644 index 000000000..8bd22cfe5 --- /dev/null +++ b/cli/tests/proto_exploit.js @@ -0,0 +1,5 @@ +const payload = `{ "__proto__": null }`; +const obj = {}; +console.log("Before: " + obj); +Object.assign(obj, JSON.parse(payload)); +console.log("After: " + obj); -- cgit v1.2.3