Project

General

Profile

Actions

Bug #22308

closed

Ignore datatable prototype pollution

Added by Alexis Mousset over 1 year ago. Updated 11 months ago.

Status:
Released
Priority:
N/A
Category:
Security
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Checked
Regression:
No

Description

https://security.snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402

In general I feel this is very unlikely to be a problem since it requires the dev to have used constructor as their data property name (or a parameter part of it). Of course quite possible and we should protect against it, but I don't recall ever having seen anyone doing that.

We don't have anything named constructor.

Actions

Also available in: Atom PDF