From 5e19659d1526a9c39f7d32e08704562d6e6f9011 Mon Sep 17 00:00:00 2001 From: David Mark Clements Date: Thu, 23 Feb 2023 18:17:52 +0100 Subject: [PATCH] __proto__ own copying doc --- readme.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/readme.md b/readme.md index 832d748..104bc81 100644 --- a/readme.md +++ b/readme.md @@ -145,6 +145,14 @@ All files | 100 | 100 | 100 | 100 | | ----------|----------|----------|----------|----------|-------------------| ``` +### `__proto__` own property copying + +`rfdc` works the same way as `Object.assign` when it comes to copying `['__proto__']` (e.g. when +an object has an own property key called '__proto__'). It results in the target object +prototype object being set per the value of the `['__proto__']` own property. + +For detailed write-up on how a way to handle this security-wise see https://www.fastify.io/docs/latest/Guides/Prototype-Poisoning/. + ## License MIT