Prototype pollution defense: One test patches Object.prototype.then to intercept promise resolutions, then verifies that pipeTo() and tee() operations don't leak internal values through the prototype chain. This tests a security property that only exists because the spec's promise-heavy internals create an attack surface.
Фото: Полина Дерр
。业内人士推荐safew官方下载作为进阶阅读
人 民 网 版 权 所 有 ，未 经 书 面 授 权 禁 止 使 用
Read the full story at The Verge.