Skip to content

fix: reject spoofed RegExp objects with non-string source property#222

Merged
okuryu merged 2 commits into
mainfrom
fix/regexp-source-injection
Jun 30, 2026
Merged

fix: reject spoofed RegExp objects with non-string source property#222
okuryu merged 2 commits into
mainfrom
fix/regexp-source-injection

test: cover getter-based RegExp source spoofing (PSECBUGS-108887)

72c674a
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar