From 971f09abe486185247e1faf4e8d1419ba2506b8d Mon Sep 17 00:00:00 2001 From: Luca Casonato Date: Thu, 23 May 2024 00:03:35 +0200 Subject: fix(runtime): use more null proto objects (#23921) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is a primordialization effort to improve resistance against users tampering with the global `Object` prototype. --------- Co-authored-by: Bartek Iwańczuk --- ext/net/02_tls.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ext/net') diff --git a/ext/net/02_tls.js b/ext/net/02_tls.js index e51df7424..81bcfb3bd 100644 --- a/ext/net/02_tls.js +++ b/ext/net/02_tls.js @@ -281,7 +281,7 @@ async function startTls( hostname = "127.0.0.1", caCerts = [], alpnProtocols = undefined, - } = {}, + } = { __proto__: null }, ) { const { 0: rid, 1: localAddr, 2: remoteAddr } = op_tls_start({ rid: conn[internalRidSymbol], -- cgit v1.2.3