Skip to content

http: make .headers and .trailers to have no prototype

Rodrigo Muino Tomonari requested to merge github/fork/mcollina/no-prototype-http-headers into master

Creating .headers and .trailers without a prototype by using Object.create(null) improves the security of Node.js applications making them less vulnerable to potential prototype pollution attacks.

This will improve the performance.

Merge request reports