Skip to content

Modify whitelist/blacklist to check values, not names #4

@lawnsea

Description

@lawnsea

@DavidBruant pointed out in an email exchange that white/blacklisting by
property names may miss aliases of privileged properties. Instead, he suggested
that I do something like he does here.

The core idea is to specify white/blacklist properties names, save the values,
and then walk the global object graph, checking everything against the values.
It may be convenient to do some form of globbing as well: Array.**.*, for
example.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions