Skip to content

node: warn for Object.prototype.__* accessors common in security warnings #39824

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bmeck wants to merge 16 commits into
base: main
Choose a base branch
from
Open

node: warn for Object.prototype.__* accessors common in security warnings #39824

Changes from 1 commit
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
813dd33
node: warn accessors common in security warnings
bmeck Aug 20, 2021
c49435f
linter
bmeck Aug 20, 2021
fd4e664
Update lib/internal/bootstrap/pre_execution.js
bmeck Aug 21, 2021
bc2ef67
DEP
bmeck Aug 21, 2021
05ef3f2
DEP meta
bmeck Aug 21, 2021
9f266d6
Update doc/api/deprecations.md
bmeck Aug 21, 2021
301d5ea
fix nits
bmeck Aug 21, 2021
9198ad2
oops, define correct prop name
bmeck Aug 21, 2021
04fbd18
cleanup
bmeck Aug 21, 2021
083c842
Update test/parallel/test-object-proto-accessor-warning.js
bmeck Aug 21, 2021
308eb0e
linter
bmeck Aug 21, 2021
c55d04a
fix refactor regression
bmeck Aug 22, 2021
741f229
pendingDeprecation
bmeck Aug 22, 2021
4b73dde
test needs flag
bmeck Aug 22, 2021
bd37bbc
Update doc/api/deprecations.md
bmeck Mar 4, 2022
07faa4b
Apply suggestions from code review
bmeck Mar 4, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
pendingDeprecation
  • Loading branch information
@bmeck
bmeck committed Aug 22, 2021
commit 741f229d2e9bd7ede0669caaffd7400b8afc12f7
96 changes: 49 additions & 47 deletions lib/internal/bootstrap/pre_execution.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -336,53 +336,55 @@ function initializeDeprecations() {
configurable: true
});

const legacy = [
['__proto__', {
get: 'Object.getPrototypeOf',
set: 'Object.setPrototypeOf'
}],
['__defineGetter__', 'Object.defineProperty'],
['__defineSetter__', 'Object.defineProperty'],
['__lookupGetter__', 'Object.getOwnPropertyDescriptor'],
['__lookupSetter__', 'Object.getOwnPropertyDescriptor'],
];
for (let i = 0; i < legacy.length; i++) {
const prop = legacy[i][0];
const replacement = legacy[i][1];
const getReplacement = typeof replacement === 'string' ?
replacement : replacement.get;
const setReplacement = typeof replacement === 'string' ?
replacement : replacement.set;
const protoDescriptor = ObjectGetOwnPropertyDescriptor(
ObjectPrototype,
prop);
if (protoDescriptor && 'value' in protoDescriptor) {
let value = protoDescriptor.value;
const writable = protoDescriptor.writable;
ObjectDefineProperty(ObjectPrototype, prop, {
get: deprecate(function() {
return value;
}, `${prop} is deprecated, use ${getReplacement} instead`, 'DEP0XXX'),
set: deprecate(function(v) {
if (!writable) return;
value = v;
}, `${prop} is deprecated, use ${setReplacement} instead`, 'DEP0XXX'),
enumerable: false,
configurable: true
});
} else {
const getter = uncurryThis(protoDescriptor.get);
const setter = uncurryThis(protoDescriptor.set);
ObjectDefineProperty(ObjectPrototype, prop, {
get: deprecate(function() {
return getter(this);
}, `${prop} is deprecated, use ${getReplacement} instead`, 'DEP0XXX'),
set: deprecate(function(value) {
setter(this, value);
}, `${prop} is deprecated, use ${setReplacement} instead`, 'DEP0XXX'),
enumerable: false,
configurable: true
});
if (pendingDeprecation) {
const legacy = [
['__proto__', {
get: 'Object.getPrototypeOf',
set: 'Object.setPrototypeOf'
}],
['__defineGetter__', 'Object.defineProperty'],
['__defineSetter__', 'Object.defineProperty'],
['__lookupGetter__', 'Object.getOwnPropertyDescriptor'],
['__lookupSetter__', 'Object.getOwnPropertyDescriptor'],
];
for (let i = 0; i < legacy.length; i++) {
const prop = legacy[i][0];
const replacement = legacy[i][1];
const getReplacement = typeof replacement === 'string' ?
replacement : replacement.get;
const setReplacement = typeof replacement === 'string' ?
replacement : replacement.set;
const protoDescriptor = ObjectGetOwnPropertyDescriptor(
ObjectPrototype,
prop);
if (protoDescriptor && 'value' in protoDescriptor) {
let value = protoDescriptor.value;
const writable = protoDescriptor.writable;
ObjectDefineProperty(ObjectPrototype, prop, {
get: deprecate(function() {
return value;
}, `${prop} is deprecated, use ${getReplacement} instead`, 'DEP0XXX'),
set: deprecate(function(v) {
if (!writable) return;
value = v;
}, `${prop} is deprecated, use ${setReplacement} instead`, 'DEP0XXX'),
enumerable: false,
configurable: true
});
} else {
const getter = uncurryThis(protoDescriptor.get);
const setter = uncurryThis(protoDescriptor.set);
ObjectDefineProperty(ObjectPrototype, prop, {
get: deprecate(function() {
return getter(this);
}, `${prop} is deprecated, use ${getReplacement} instead`, 'DEP0XXX'),
set: deprecate(function(value) {
setter(this, value);
}, `${prop} is deprecated, use ${setReplacement} instead`, 'DEP0XXX'),
enumerable: false,
configurable: true
});
}
}
}
}
Expand Down