mirrors/electron
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions 1

fix: prevent remote from messing with constructor names (#22820)

Browse source
This commit is contained in:
Jeremy Apthorp 2020-03-25 13:13:10 -07:00 • committed by GitHub
parent 746266bd93
commit b327478cf0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 17 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

14
spec-main/api-remote-spec.ts
View file

@ -283,11 +283,9 @@ ifdescribe(features.isRemoteModuleEnabled())('remote module', () => {
remotely.it(path.join(fixtures, 'module', 'no-prototype.js'))('should work when object has no prototype', (module: string) => {
const a = require('electron').remote.require(module);
expect(a.foo.constructor.name).to.equal('');
expect(a.foo.bar).to.equal('baz');
expect(a.foo.baz).to.equal(false);
expect(a.bar).to.equal(1234);
expect(a.anonymous.constructor.name).to.equal('');
expect(a.getConstructorName(Object.create(null))).to.equal('');
expect(a.getConstructorName(new (class {})())).to.equal('');
});
@ -436,7 +434,8 @@ ifdescribe(features.isRemoteModuleEnabled())('remote module', () => {
});
describe('remote object in renderer', () => {
const remotely = makeRemotely(makeWindow());
const win = makeWindow();
const remotely = makeRemotely(win);
remotely.it(fixtures)('can change its properties', (fixtures: string) => {
const module = require('path').join(fixtures, 'module', 'property.js');
@ -500,6 +499,15 @@ ifdescribe(features.isRemoteModuleEnabled())('remote module', () => {
global.gc();
stringify({});
});
it('can handle objects without constructors', async () => {
win().webContents.once('remote-get-global', (event) => {
class Foo { bar () { return 'bar'; } }
Foo.prototype.constructor = undefined as any;
event.returnValue = new Foo();
});
expect(await remotely(() => require('electron').remote.getGlobal('test').bar())).to.equal('bar');
});
});
describe('remote value in browser', () => {