Skip to content

lib: make safe primordials Promise methods

catch and finally methods on %Promise.prototype% looks up the then property of the promise instance, making it at risk of prototype pollution.

Refs: https://tc39.es/ecma262/#sec-promise.prototype.catch

Merge request reports

Loading