psimsa/handlebars.js
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix test case for browsers that do not support __defineGetter__

Browse Source
This commit is contained in:
Nils Knappmeier
2019-09-27 00:09:04 +02:00
parent 2357140c68
commit 8742bde701
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
spec/security.js
+3
View File
@@ -91,6 +91,9 @@ describe('security issues', function() {
describe('GH-1563', function() { describe('GH-1563', function() {
it('should not allow to access constructor after overriding via __defineGetter__', function() { it('should not allow to access constructor after overriding via __defineGetter__', function() {
if (({}).__defineGetter__ == null || ({}).__lookupGetter__ == null) {
return; // Browser does not support this exploit anyway
}
shouldCompileTo('{{__defineGetter__ "undefined" valueOf }}' + shouldCompileTo('{{__defineGetter__ "undefined" valueOf }}' +
'{{#with __lookupGetter__ }}' + '{{#with __lookupGetter__ }}' +
'{{__defineGetter__ "propertyIsEnumerable" (this.bind (this.bind 1)) }}' + '{{__defineGetter__ "propertyIsEnumerable" (this.bind (this.bind 1)) }}' +