Tobias Nießen 3454e79713 console: fix prototype pollution via console.table ...

CVE-ID: CVE-2022-21824
PR-URL: https://github.com/nodejs-private/node-private/pull/307
Refs: https://hackerone.com/reports/1431042
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Сковорода Никита Андреевич <chalkerx@gmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

2022-01-10 22:38:05 +00:00

..

assert

assert: add assert/strict alias module

2020-06-25 08:37:48 -07:00

dns

dns: add dns/promises alias

2020-05-24 03:26:21 +02:00

fs

fs: add fs/promises alias module

2020-02-18 22:15:50 -08:00

internal

console: fix prototype pollution via console.table

2022-01-10 22:38:05 +00:00

path

path: add path/posix and path/win32 alias modules

2020-10-20 14:27:31 +00:00

readline

readline: propagate signal.reason in awaitable question

2021-12-02 12:13:02 -08:00

stream

stream: remove whatwg streams experimental warning

2021-12-01 08:02:13 +00:00

timers

timers: add experimental scheduler api

2021-12-05 07:36:50 -08:00

util

util: add util/types alias module

2020-10-21 01:26:34 +02:00

_http_agent.js

Revert "async_hooks: merge resource_symbol with owner_symbol"

2021-11-18 18:42:27 +05:30

_http_client.js

tls: improve handling of shutdown

2021-12-08 07:29:55 +01:00

_http_common.js

http: remove CRLF variable

2021-09-16 09:44:12 -04:00

_http_incoming.js

lib: fix typos in lib code comments

2021-11-12 23:26:20 +01:00

_http_outgoing.js

http: don't write empty data on req/res end()

2021-12-10 19:44:24 +00:00

_http_server.js

tools,benchmark,lib,test: enable no-case-declarations lint rule

2022-01-05 07:42:19 -08:00

_stream_duplex.js

stream: do not use _stream_* anymore

2021-01-05 19:02:04 +01:00

_stream_passthrough.js

stream: do not use _stream_* anymore

2021-01-05 19:02:04 +01:00

_stream_readable.js

stream: do not use _stream_* anymore

2021-01-05 19:02:04 +01:00

_stream_transform.js

stream: do not use _stream_* anymore

2021-01-05 19:02:04 +01:00

_stream_wrap.js

lib: assign missed deprecation code

2019-03-07 15:48:55 +01:00

_stream_writable.js

stream: do not use _stream_* anymore

2021-01-05 19:02:04 +01:00

_tls_common.js

tls: fix handling of x509 subject and issuer

2022-01-10 22:38:05 +00:00

_tls_wrap.js

tls: validate "rejectUnauthorized: undefined"

2021-08-11 16:22:15 +01:00

.eslintrc.yaml

worker: expose BroadcastChannel as a global

2021-12-24 08:32:48 -08:00

assert.js

assert: prefer reference comparison over string comparison

2021-12-14 14:58:47 +00:00

async_hooks.js

async_hooks: expose async_wrap providers

2021-11-12 21:48:34 +00:00

buffer.js

url,buffer: implement URL.createObjectURL

2021-08-12 07:23:15 -07:00

child_process.js

child_process: improve argument validation

2021-12-29 16:41:45 -08:00

cluster.js

lib,src: update cluster to use Parent

2021-01-05 15:41:45 -05:00

console.js

console: split console into global.js and constructor.js

2018-12-02 04:51:18 +08:00

constants.js

lib: flatten access to primordials

2019-11-25 10:28:15 +01:00

crypto.js

crypto: alias webcrypto.subtle and webcrypto.getRandomValues on crypto

2021-12-27 14:48:59 +00:00

dgram.js

dgram: fix send with out of bounds offset + length

2021-10-25 13:26:24 +00:00

diagnostics_channel.js

lib: add unsubscribe method to non-active DC channels

2021-10-19 14:46:14 +00:00

dns.js

dns: runtime deprecate type coercion of dns.lookup options

2021-09-15 16:59:10 +00:00

domain.js

lib: comment explaining special-case handling of promises

2021-07-23 03:54:33 +00:00

events.js

events: add EventEmitterAsyncResource to core

2021-12-23 00:56:57 +00:00

fs.js

fs: correct param names in JSDoc comments

2021-12-21 17:53:57 +00:00

http2.js

http2: add support for sensitive headers

2020-07-16 00:25:47 +02:00

http.js

lib,test,tools: use consistent JSDoc types

2021-11-29 06:48:00 +00:00

https.js

http,https: align server option of https with http

2021-06-26 14:21:57 +00:00

inspector.js

typings: add JSDoc typings for inspector

2021-10-31 13:14:33 +01:00

module.js

module: add API for interacting with source maps

2020-01-14 12:39:06 -08:00

net.js

Revert "async_hooks: merge resource_symbol with owner_symbol"

2021-11-18 18:42:27 +05:30

os.js

os: add os.devNull

2021-06-01 21:06:18 +02:00

path.js

lib: fix typos in lib code comments

2021-11-12 23:26:20 +01:00

perf_hooks.js

perf_hooks: fix performance timeline wpt failures

2021-07-30 07:29:44 -07:00

process.js

…

punycode.js

punycode: add pending deprecation

2021-04-30 10:59:28 -07:00

querystring.js

lib: include return types in JSDoc

2021-12-12 03:51:00 +00:00

readline.js

readline: propagate signal.reason in awaitable question

2021-12-02 12:13:02 -08:00

repl.js

repl: fix and extend require/import tab complete

2021-11-25 00:01:30 +00:00

stream.js

stream: add isReadable helper

2021-12-29 20:42:10 +01:00

string_decoder.js

typings: add JSDoc for string_decoder

2021-12-31 00:44:32 +01:00

sys.js

benchmark,doc,lib,test: capitalize comments

2019-03-10 00:44:40 +01:00

timers.js

timers: use ref counts to count timers

2022-01-02 15:28:23 +00:00

tls.js

tls: drop support for URI alternative names

2022-01-10 22:38:05 +00:00

trace_events.js

lib: refactor to use validateObject

2021-01-28 12:53:50 +01:00

tty.js

tty: enable buffering

2021-07-07 14:50:47 +02:00

url.js

url: detect hostname more reliably in url.parse()

2021-12-02 17:58:05 +00:00

util.js

util: expose stripVTControlCharacters()

2021-10-01 22:56:58 -04:00

v8.js

lib,test,tools: use consistent JSDoc types

2021-11-29 06:48:00 +00:00

vm.js

vm: add support for import assertions in dynamic imports

2021-10-09 08:44:53 +00:00

wasi.js

wasi: use missing validator

2021-06-26 16:31:30 +02:00

worker_threads.js

worker: add setEnvironmentData/getEnvironmentData

2021-03-15 07:40:26 -07:00

zlib.js

zlib: avoid converting Uint8Array instances to Buffer

2021-07-26 09:01:53 -07:00