To mitigate scope prototype security issues, need consider more robust/systematic approaches like:
- Use
Object.freeze() and managed scope on top of it for assigns
- Using libraries like joi or zod to strip out "blacklisted" keys like proto or constructor
- Possibility of using
Map instead of plain object
To mitigate scope prototype security issues, need consider more robust/systematic approaches like:
Object.freeze()and managed scope on top of it for assignsMapinstead of plain object