From 6e5437d0fc0aca107f9de7a04a6c89a64da1d79a Mon Sep 17 00:00:00 2001 From: Chris Duncan Date: Fri, 7 Aug 2026 14:19:33 -0700 Subject: [PATCH] Restrict special object properties from rolodex names. --- src/lib/rolodex.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/lib/rolodex.ts b/src/lib/rolodex.ts index 3e690e8..9791ff5 100644 --- a/src/lib/rolodex.ts +++ b/src/lib/rolodex.ts @@ -34,6 +34,9 @@ export class Rolodex { if (typeof name !== 'string') { throw new Error('Name must be a string for rolodex entries') } + if (name === '__proto__' || name === '__defineGetter__') { + throw new Error('Invalid name') + } if (name.slice(0, 5) === 'nano_' || name.slice(0, 4) === 'xrb_') { throw new Error('Name cannot start with an address prefix') } -- 2.52.0