obfuscatedgenerated / obfuscatedgenerated.github.io

https://ollieg.codes
MIT License
0 stars 0 forks source link

[🐛] - Prototype pollution in localstorage fs #3

Open obfuscatedgenerated opened 1 year ago

obfuscatedgenerated commented 1 year ago

// TODO: unsolveable prototype pollution without banning filenames. tried using map, but recursive traversal wont work as the instances are distinct (not writing to the original state dict) // on the plus side, the base64 encoding seems to prevent this from happening since they arent strings, but the cache will disagree

obfuscatedgenerated commented 1 year ago

I think it's wise to just get the alternative storage done (i.e. indexeddb). Localstorage is so hacky.