Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: resist pollution #106

Merged
merged 12 commits into from
Apr 15, 2022
Merged

fix: resist pollution #106

merged 12 commits into from
Apr 15, 2022

Commits on Apr 13, 2022

  1. Proof of concept of pollution protection

    @shadowspawn
    shadowspawn committed Apr 13, 2022
    Configuration menu
    Copy the full SHA
    b946c3a View commit details
    Browse the repository at this point in the history

Commits on Apr 14, 2022

  1. Update index.js 

    Co-authored-by: Jordan Harband <ljharb@gmail.com>
    @shadowspawn @ljharb
    shadowspawn and ljharb authored Apr 14, 2022
    Configuration menu
    Copy the full SHA
    fc9ff43 View commit details
    Browse the repository at this point in the history

  2. Tighten up index.js code against prototype pollution

    @shadowspawn
    shadowspawn committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    6d2351a View commit details
    Browse the repository at this point in the history

  3. Move helpers to utils

    @shadowspawn
    shadowspawn committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    9c7d5d4 View commit details
    Browse the repository at this point in the history

  4. Merge remote-tracking branch 'upstream/main' into feature/pollution-p… 

    …roof
    @shadowspawn
    shadowspawn committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    dab667b View commit details
    Browse the repository at this point in the history

  5. Make utils more robust to pollution

    @shadowspawn
    shadowspawn committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    54e221a View commit details
    Browse the repository at this point in the history

  6. Likely temporary ObjectDefineProperty paranoia

    @shadowspawn
    shadowspawn committed Apr 14, 2022
    Configuration menu
    Copy the full SHA
    3ce5a47 View commit details
    Browse the repository at this point in the history

Commits on Apr 15, 2022

  1. Merge branch 'main' into feature/pollution-proof

    @shadowspawn
    shadowspawn committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    0daf602 View commit details
    Browse the repository at this point in the history

  2. Add JSDoc for Check and Store

    @shadowspawn
    shadowspawn committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    ec4a81d View commit details
    Browse the repository at this point in the history

  3. Add pollution tests

    @shadowspawn
    shadowspawn committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    501c631 View commit details
    Browse the repository at this point in the history

  4. Combined test files

    @shadowspawn
    shadowspawn committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    c684916 View commit details
    Browse the repository at this point in the history

  5. Make set/restore prototype do more faithful restore

    @shadowspawn
    shadowspawn committed Apr 15, 2022
    Configuration menu
    Copy the full SHA
    99768b5 View commit details
    Browse the repository at this point in the history