You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
After the comments from #1633 and #1634 and the referenced issues, I think it would be a good idea to create a runtime option that allows to whitelist the prototype of a given class.
I think it would be helpful when using custom classes in web-servers, because it is certainly not save to turn off prototype checks in such an environment.
I would like to have opinions about that.
The text was updated successfully, but these errors were encountered:
@nknapp Would it be possible to use getPrototypeOf and getOwnPropertyDescriptor to see if the getter was defined. I'm not sure if this regresses to the issues that were already fixed or not.
classExample{gethello(){return'world';}}constobj=newExample();console.log(obj.hello);// "world"console.log(Object.getOwnPropertyDescriptor(obj,'hello'));// undefinedconsole.log(Object.getOwnPropertyDescriptor(Object.getPrototypeOf(obj),'hello'));// { configurable: true, enumerable: false, get: function get hello() { return 'world'; }, set: undefined }
After the comments from #1633 and #1634 and the referenced issues, I think it would be a good idea to create a runtime option that allows to whitelist the prototype of a given class.
Calling the template wit
would allow a property to be resolved if the following is true.
I think it would be helpful when using custom classes in web-servers, because it is certainly not save to turn off prototype checks in such an environment.
I would like to have opinions about that.
The text was updated successfully, but these errors were encountered: