Add Object.freeze to prevent proto injections (#1781)

Co-authored-by: Adrià Casajús <adria.casajus@proton.ch>
2023-06-21 18:57:54 +02:00 · 2023-06-21 18:57:54 +02:00 · 40663358d8
parent f046b2270c
commit 40663358d8
1 changed files with 1 additions and 0 deletions
--- a/templates/footer.html
+++ b/templates/footer.html
@ -286,6 +286,7 @@

    },
    async mounted() {
+      Object.freeze(Object.prototype);
      let that = this;
      let res = await fetch(`/api/notifications?page=${that.page}`, {
        method: "GET",