On 20/09/2013, at 15:40, mks wrote: > {} is not an hash table. Object.create(null) is more likely
That, *and* kill the __proto__, if not: hash= Object.create(null); key= '__proto__'; hash[key]= 27; hash[key] null //What? Or worse: hash[key]= this; 'require' in hash true //What? 'console' in hash true //What? 'Array' in hash true //What? etc. -- ( Jorge )(); -- -- Job Board: http://jobs.nodejs.org/ Posting guidelines: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines You received this message because you are subscribed to the Google Groups "nodejs" group. To post to this group, send email to nodejs@googlegroups.com To unsubscribe from this group, send email to nodejs+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/nodejs?hl=en?hl=en --- You received this message because you are subscribed to the Google Groups "nodejs" group. To unsubscribe from this group and stop receiving emails from it, send an email to nodejs+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.