[Pkg-javascript-devel] pkg-js-autopkgtest will disable __proto__ in tests
Yadd
yadd at debian.org
Sun Sep 11 21:43:18 BST 2022
Hi all,
next pkg-js-autopkgtest (0.15.x) will launch tests with
`nodejs --disable-proto=throw`: this will cause the tests to fail when
`Object.prototype.__proto__` property is used.
If consider that your package can use this feature without security hole
(for test for example), you will be able to disable this nodejs option
with `touch debian/tests/pkg-js/enable-proto`, until Debian's Node.js
enables this feature by default.
Cheers,
Yadd
More information about the Pkg-javascript-devel
mailing list