events: protect property defs against prototype polution

Signed-off-by: James M Snell <jasnell@gmail.com> PR-URL: #39773 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
nodejs · Sep 6, 2021 · a4b8c13 · a4b8c13
1 parent cfbe906
commit a4b8c13
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/internal/worker/io.js b/lib/internal/worker/io.js
@@ -142,6 +142,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   origin: {
     get() {
@@ -151,6 +152,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   lastEventId: {
     get() {
@@ -160,6 +162,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   source: {
     get() {
@@ -169,6 +172,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   ports: {
     get() {
@@ -178,6 +182,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
 });