Actions
Bug #22308
closed
Ignore datatable prototype pollution
Status:
Released
Priority:
N/A
Assignee:
Category:
Security
Target version:
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
No
Description
https://security.snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402
In general I feel this is very unlikely to be a problem since it requires the dev to have used constructor as their data property name (or a parameter part of it). Of course quite possible and we should protect against it, but I don't recall ever having seen anyone doing that.
We don't have anything named constructor.
Updated by
Actions