fabiosantoscode / value-censorship

0 stars 0 forks source link

Bypass possible using the Async Functions #3

Open pwn1sher opened 5 years ago

pwn1sher commented 5 years ago

The library currently doesn't have a check for AsyncFunction

const censor = require('value-censorship')

censor(`
((async function(){}).constructor("42"))()
`)
pwn1sher commented 5 years ago

Also there is Async generators - async function* () to look after