~/talk

JavaScript Prototypes Behind the Scenes

Talkat nodejsday 2020 · on Wednesday, 2020-10-14· [javascript]
slides:none on file

Shows exactly how new sets an object’s internal prototype to the function’s object.create blueprint and how methods live on prototypes while per-instance state ends up on the object (demo: ++ creates an own property). Demonstrates the __proto__ and constructor paths to reach the global prototype and reproduces a real-world prototype pollution chain (lodash → Kibana) that yields RCE via merged JSON. Recommends creating null-prototype data objects and using npm install secure jsonpass.

AI-written summary · about

  1. 0:00Start
  2. 8:04Prototypes
  3. 9:57Cleaner Prototype Object Creation
  4. 34:52The Antidote
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.