Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: tolerate empty func.prototype #1221

Merged
merged 2 commits into from Jun 18, 2022
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
9 changes: 9 additions & 0 deletions packages/ses/src/whitelist-intrinsics.js
Expand Up @@ -285,6 +285,15 @@ export default function whitelistIntrinsics(
delete obj[prop];
} catch (err) {
if (prop in obj) {
if (typeof obj === 'function' && prop === 'prototype') {
obj.prototype = undefined;
if (obj.prototype === undefined) {
// eslint-disable-next-line @endo/no-polymorphic-call
console.warn(`Tolerating undeletable ${subPath} === undefined`);
Comment on lines +290 to +292
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will this not always warn?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm. Unless the prototype: 'undefined' property is explicitly defined in the whitelist?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In any case, for present purposes, I prefer that it always warn.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, I see the context.

// eslint-disable-next-line no-continue
continue;
}
}
// eslint-disable-next-line @endo/no-polymorphic-call
console.error(`failed to delete ${subPath}`, err);
} else {
Expand Down
25 changes: 25 additions & 0 deletions packages/ses/test/test-tolerate-empty-prototype.js
@@ -0,0 +1,25 @@
import test from 'ava';
import '../index.js';

// See https://github.com/zloirock/core-js/issues/1092
const originalPush = Array.prototype.push;
// eslint-disable-next-line no-extend-native
Array.prototype.push = function push(...args) {
return Reflect.apply(originalPush, this, args);
};

lockdown();

test('tolerate empty prototype', t => {
t.assert('prototype' in Array.prototype.push);
t.is(Array.prototype.push.prototype, undefined);
Copy link

@zloirock zloirock Jun 21, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Array.prototype.push.prototype here is not set to undefined, so it's an object, no?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, clear.

t.deepEqual(
Object.getOwnPropertyDescriptor(Array.prototype.push, 'prototype'),
{
value: undefined,
writable: false,
enumerable: false,
configurable: false,
},
);
});