Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Freezing the global object #134

Open
shaysegev opened this issue Jul 20, 2020 · 0 comments
Open

Freezing the global object #134

shaysegev opened this issue Jul 20, 2020 · 0 comments

Comments

@shaysegev
Copy link

shaysegev commented Jul 20, 2020

I like the library and it solves some of my issues, though I've noticed there is a security issue with (understandably) setting the namespace object to the window by default.

AFAIK there's no way to currently make the object immutable, which exposes the apps using the library for data manipulation of the global object being modified.

Would that be worth adding a deep freeze functionality to prevent potential exploitation of the data being passed down to the document?

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant