René's URL Explorer Experiment


Title: Enhance prototype pollution protection by zjs81 · Pull Request #288 · msgpack/msgpack-javascript · GitHub

Open Graph Title: Enhance prototype pollution protection by zjs81 · Pull Request #288 · msgpack/msgpack-javascript

X Title: Enhance prototype pollution protection by zjs81 · Pull Request #288 · msgpack/msgpack-javascript

Description: @msgpack/msgpack - MessagePack for JavaScript / msgpack.org[ECMA-262/JavaScript/TypeScript] - Enhance prototype pollution protection by zjs81 · Pull Request #288 · msgpack/msgpack-javascript

Open Graph Description: Added constructor and prototype to the not allowed keys

X Description: Added constructor and prototype to the not allowed keys

Opengraph URL: https://github.com/msgpack/msgpack-javascript/pull/288

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:3ceeb6b5-6077-80cd-aa51-bd77f13fc42c
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id862E:3695F9:2102FFA:30116E8:6A565653
html-safe-noncebb2676cd3a7b9e110134b2cd159fb41c7b164a84cde70170db2c8c167284bf52
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NjJFOjM2OTVGOToyMTAyRkZBOjMwMTE2RTg6NkE1NjU2NTMiLCJ2aXNpdG9yX2lkIjoiNzM1NjU2NzU2MTQ0OTEzMzY1MSIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac89fa1955732b100fba741e69be6e8e0244c1dc82611f9ff5145c00f5c4a2a1a9
hovercard-subject-tagpull_request:3192440362
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/msgpack/msgpack-javascript/288/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/74a86bb9c5f837d6f7bbf7ce60672ffcaea63384cab5bab7a15491d45643eba3/msgpack/msgpack-javascript/pull/288
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/74a86bb9c5f837d6f7bbf7ce60672ffcaea63384cab5bab7a15491d45643eba3/msgpack/msgpack-javascript/pull/288
og:image:altAdded constructor and prototype to the not allowed keys
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamezjs81
hostnamegithub.com
expected-hostnamegithub.com
Nonecffc1b7eb44a3dbb1e61c2a0523cad1f04e0368d730bf85ac498c992baf19e7d
turbo-cache-controlno-cache
go-importgithub.com/msgpack/msgpack-javascript git https://github.com/msgpack/msgpack-javascript.git
octolytics-dimension-user_id198264
octolytics-dimension-user_loginmsgpack
octolytics-dimension-repository_id2761854
octolytics-dimension-repository_nwomsgpack/msgpack-javascript
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id2761854
octolytics-dimension-repository_network_root_nwomsgpack/msgpack-javascript
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release233d2274d9c68198aa6cb23d1db680b5c0b58bba
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/msgpack/msgpack-javascript/pull/288#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmsgpack%2Fmsgpack-javascript%2Fpull%2F288
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmsgpack%2Fmsgpack-javascript%2Fpull%2F288
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=msgpack%2Fmsgpack-javascript
Reloadhttps://github.com/msgpack/msgpack-javascript/pull/288
Reloadhttps://github.com/msgpack/msgpack-javascript/pull/288
Reloadhttps://github.com/msgpack/msgpack-javascript/pull/288
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
msgpack https://github.com/msgpack
msgpack-javascripthttps://github.com/msgpack/msgpack-javascript
Notifications https://github.com/login?return_to=%2Fmsgpack%2Fmsgpack-javascript
Fork 177 https://github.com/login?return_to=%2Fmsgpack%2Fmsgpack-javascript
Star 1.6k https://github.com/login?return_to=%2Fmsgpack%2Fmsgpack-javascript
Code https://github.com/msgpack/msgpack-javascript
Issues 17 https://github.com/msgpack/msgpack-javascript/issues
Pull requests 5 https://github.com/msgpack/msgpack-javascript/pulls
Discussions https://github.com/msgpack/msgpack-javascript/discussions
Actions https://github.com/msgpack/msgpack-javascript/actions
Security and quality 0 https://github.com/msgpack/msgpack-javascript/security
Insights https://github.com/msgpack/msgpack-javascript/pulse
Code https://github.com/msgpack/msgpack-javascript
Issues https://github.com/msgpack/msgpack-javascript/issues
Pull requests https://github.com/msgpack/msgpack-javascript/pulls
Discussions https://github.com/msgpack/msgpack-javascript/discussions
Actions https://github.com/msgpack/msgpack-javascript/actions
Security and quality https://github.com/msgpack/msgpack-javascript/security
Insights https://github.com/msgpack/msgpack-javascript/pulse
gfxhttps://github.com/gfx
msgpack:mainhttps://github.com/msgpack/msgpack-javascript/tree/main
zjs81:fix/complete-prototype-pollution-protectionhttps://github.com/zjs81/msgpack-javascript/tree/fix/complete-prototype-pollution-protection
Conversationhttps://github.com/msgpack/msgpack-javascript/pull/288
Commits1 (1)https://github.com/msgpack/msgpack-javascript/pull/288/commits
Checkshttps://github.com/msgpack/msgpack-javascript/pull/288/checks
Files changedhttps://github.com/msgpack/msgpack-javascript/pull/288/files
Enhance prototype pollution protection https://github.com/msgpack/msgpack-javascript/pull/288#top
gfxhttps://github.com/gfx
msgpack:mainhttps://github.com/msgpack/msgpack-javascript/tree/main
zjs81:fix/complete-prototype-pollution-protectionhttps://github.com/zjs81/msgpack-javascript/tree/fix/complete-prototype-pollution-protection
https://github.com/zjs81
zjs81https://github.com/zjs81
Jan 20, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issue-3835052336
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
enhance prototype pollution protection by disallowing 'constructor' a…https://github.com/msgpack/msgpack-javascript/pull/288/commits/72c849023ad2b89070693aec8b90a00619473d35
72c8490https://github.com/msgpack/msgpack-javascript/pull/288/commits/72c849023ad2b89070693aec8b90a00619473d35
https://github.com/zjs81
zjs81https://github.com/zjs81
Jan 20, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issuecomment-3774502962
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/codecov-commenter
codecov-commenterhttps://github.com/codecov-commenter
Jan 20, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issuecomment-3775053646
https://private-user-images.githubusercontent.com/152432831/340411587-e90313f4-9d3a-4b63-8b54-cfe14e7ec20d.svg?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3ODQwNDMzOTIsIm5iZiI6MTc4NDA0MzA5MiwicGF0aCI6Ii8xNTI0MzI4MzEvMzQwNDExNTg3LWU5MDMxM2Y0LTlkM2EtNGI2My04YjU0LWNmZTE0ZTdlYzIwZC5zdmc_WC1BbXotQWxnb3JpdGhtPUFXUzQtSE1BQy1TSEEyNTYmWC1BbXotQ3JlZGVudGlhbD1BS0lBVkNPRFlMU0E1M1BRSzRaQSUyRjIwMjYwNzE0JTJGdXMtZWFzdC0xJTJGczMlMkZhd3M0X3JlcXVlc3QmWC1BbXotRGF0ZT0yMDI2MDcxNFQxNTMxMzJaJlgtQW16LUV4cGlyZXM9MzAwJlgtQW16LVNpZ25hdHVyZT1iOTBmNGY2YjMxYmM1YjIzYzZkZTM1NTlkZTY1ZTQ2ZDJjMzdjNmVhODcxOGVhNjRjMWJjOTEzYzA3MmIyNGQ5JlgtQW16LVNpZ25lZEhlYWRlcnM9aG9zdCZyZXNwb25zZS1jb250ZW50LXR5cGU9aW1hZ2UlMkZzdmclMkJ4bWwifQ.UG2WtmxLkNq9gNg0fzOEVdxktYZAkmlR--6U7GTkVQg
Codecovhttps://app.codecov.io/gh/msgpack/msgpack-javascript/pull/288?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=msgpack
69295b3https://app.codecov.io/gh/msgpack/msgpack-javascript/commit/69295b3a8b5c555a015836c37f7c58aadaab1322?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=msgpack
72c8490https://app.codecov.io/gh/msgpack/msgpack-javascript/commit/72c849023ad2b89070693aec8b90a00619473d35?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=msgpack
Codecov GitHub apphttps://github.com/apps/codecov/installations/select_target
☔ View full report in Codecov by Sentryhttps://app.codecov.io/gh/msgpack/msgpack-javascript/pull/288?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=msgpack
Share it herehttps://about.codecov.io/codecov-pr-comment-feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=msgpack
Test Analyticshttps://docs.codecov.com/docs/test-analytics
JS Bundle Analysishttps://docs.codecov.com/docs/javascript-bundle-analysis
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/gfx
gfxhttps://github.com/gfx
dd2190bhttps://github.com/msgpack/msgpack-javascript/commit/dd2190b93de1b8edc0eb5cd631a0f05bf5f1f2bb
Jan 20, 2026https://github.com/msgpack/msgpack-javascript/pull/288#event-22173699419
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/gfx
gfxhttps://github.com/gfx
Jan 20, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issuecomment-3775242161
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/zjs81
zjs81https://github.com/zjs81
January 20, 2026 23:02https://github.com/msgpack/msgpack-javascript/pull/288#event-22174316837
https://github.com/zjs81
zjs81https://github.com/zjs81
Jan 20, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issuecomment-3775356380
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/michaelficarra
michaelficarrahttps://github.com/michaelficarra
Jan 30, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issuecomment-3824634097
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
msgpack-javascript/src/Decoder.tshttps://github.com/msgpack/msgpack-javascript/blob/dd2190b93de1b8edc0eb5cd631a0f05bf5f1f2bb/src/Decoder.ts#L138
dd2190bhttps://github.com/msgpack/msgpack-javascript/commit/dd2190b93de1b8edc0eb5cd631a0f05bf5f1f2bb
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/michaelficarra
michaelficarrahttps://github.com/michaelficarra
Jan 30, 2026 https://github.com/msgpack/msgpack-javascript/pull/288#pullrequestreview-3729328772
View reviewed changes https://github.com/msgpack/msgpack-javascript/pull/288/files/72c849023ad2b89070693aec8b90a00619473d35
test/prototype-pollution.test.tshttps://github.com/msgpack/msgpack-javascript/pull/288/files/72c849023ad2b89070693aec8b90a00619473d35#diff-d6d5f42c37a3654852975eff90501c538900948deef63799e209a7762ad6d71b
michaelficarrahttps://github.com/michaelficarra
Jan 30, 2026https://github.com/msgpack/msgpack-javascript/pull/288#discussion_r2747090391
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/michaelficarra
michaelficarrahttps://github.com/michaelficarra
Jan 30, 2026 https://github.com/msgpack/msgpack-javascript/pull/288#pullrequestreview-3729354394
View reviewed changes https://github.com/msgpack/msgpack-javascript/pull/288/files/72c849023ad2b89070693aec8b90a00619473d35
test/prototype-pollution.test.tshttps://github.com/msgpack/msgpack-javascript/pull/288/files/72c849023ad2b89070693aec8b90a00619473d35#diff-d6d5f42c37a3654852975eff90501c538900948deef63799e209a7762ad6d71b
michaelficarrahttps://github.com/michaelficarra
Jan 30, 2026https://github.com/msgpack/msgpack-javascript/pull/288#discussion_r2747111945
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/michaelficarra
michaelficarrahttps://github.com/michaelficarra
Jan 30, 2026https://github.com/msgpack/msgpack-javascript/pull/288#issuecomment-3825136204
msgpack-javascript/src/Decoder.tshttps://github.com/msgpack/msgpack-javascript/blob/dd2190b93de1b8edc0eb5cd631a0f05bf5f1f2bb/src/Decoder.ts#L664
dd2190bhttps://github.com/msgpack/msgpack-javascript/commit/dd2190b93de1b8edc0eb5cd631a0f05bf5f1f2bb
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.co/hiddenchars
https://github.com/msgpack/msgpack-javascript/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmsgpack%2Fmsgpack-javascript%2Fpull%2F288
https://github.com/michaelficarra
michaelficarra https://github.com/michaelficarra
https://github.com/msgpack/msgpack-javascript/pull/288/files/72c849023ad2b89070693aec8b90a00619473d35
Please reload this pagehttps://github.com/msgpack/msgpack-javascript/pull/288
https://github.com/zjs81
https://github.com/codecov-commenter
https://github.com/gfx
https://github.com/michaelficarra
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.