fix(security): block Object.prototype filter/tag lookups (RCE)#897

Open

harttle wants to merge 7 commits into

fix/filter-prototype-rce

Commits on May 12, 2026

fix(context): use null-prototype scope and register objects

harttle
and
cursoragent
committed
revert(context): plain {} registers and getRegister ||

harttle
and
cursoragent
committed
test(context): assert scope isolation without probing prototypes

harttle
and
cursoragent
committed