From 40663358d86d0e290b46a9a5fca007b6f847453b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adri=C3=A0=20Casaj=C3=BAs?= Date: Wed, 21 Jun 2023 18:57:54 +0200 Subject: [PATCH] Add Object.freeze to prevent proto injections (#1781) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Adrià Casajús --- templates/footer.html | 1 + 1 file changed, 1 insertion(+) diff --git a/templates/footer.html b/templates/footer.html index 70fe1be3..903e04e2 100644 --- a/templates/footer.html +++ b/templates/footer.html @@ -286,6 +286,7 @@ }, async mounted() { + Object.freeze(Object.prototype); let that = this; let res = await fetch(`/api/notifications?page=${that.page}`, { method: "GET",