Write tests to specifically catch potential prototype pollution bugs

JaneJeon / objection-hashid

Objection plugin to automatically obfuscate model ids using hashids!

https://janejeon.github.io/objection-hashid

GNU Lesser General Public License v3.0

14 stars 6 forks source link

Write tests to specifically catch potential prototype pollution bugs #146

Closed JaneJeon closed 2 years ago

JaneJeon commented 3 years ago

As far as I can tell, none of the object operations in this library are subject to the prototype pollution exploits, as all of the object keys are defined by the programmer, not the user. However, we should be safe than sorry and test to make sure we handle those cases.

See: https://github.com/JaneJeon/objection-authorize/issues/195

JaneJeon commented 2 years ago

Closed in favour of eslint-config's own issue