event_target: protect property defs against prototype polution

Signed-off-by: James M Snell <jasnell@gmail.com>
nodejs · Aug 16, 2021 · ae8fe16 · ae8fe16
1 parent 5a9deb4
commit ae8fe16
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/internal/worker/io.js b/lib/internal/worker/io.js
@@ -142,6 +142,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   origin: {
     get() {
@@ -151,6 +152,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   lastEventId: {
     get() {
@@ -160,6 +162,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   source: {
     get() {
@@ -169,6 +172,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
   ports: {
     get() {
@@ -178,6 +182,7 @@ ObjectDefineProperties(MessageEvent.prototype, {
     },
     enumerable: true,
     configurable: true,
+    set: undefined,
   },
 });