#javascriptsecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #javascriptsecurity, aggregated by home.social.
-
What's wrong with this JavaScript prototype pollution?
What's wrong with this JavaScript prototype pollution from user merge. The JavaScript code merges user input into an object. In JavaScript __proto__ or constructor can pollute all objects.
#whatswrongwiththisjavascriptcode #javascriptbug #javascriptproductionbug #javascriptdebugging #javascriptbackend #javascriptcodereview #javascriptsecurity #javascriptperformance #javascriptreliability #jav...
-
What's wrong with this JavaScript BigInt mixing with Number?
What's wrong with this JavaScript BigInt mixing with Number in a calculator. The JavaScript code adds BigInt and Number. In JavaScript this throws and crashes the app.
#whatswrongwiththisjavascriptcode #javascriptbug #javascriptproductionbug #javascriptdebugging #javascriptbackend #javascriptcodereview #javascriptsecurity #javascriptperformance #javascriptreliability #javascriptapi #jav...
-
A tiny flaw in a common math eval library is opening the door to remote attacks across hundreds of projects. How did a simple overlook snowball into a security crisis—and what fixes can save the day?
#rce
#javascriptsecurity
#cve202512735
#opensource
#cybersecurity
#vulnerabilitymanagement
#expr-eval
#remotecodeexecution
#securitypatch
