We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
2 parents eb33e14 + 82f3935 commit 402e56dCopy full SHA for 402e56d
defensive-coding/exercise/attacks/attack5.js
@@ -4,10 +4,14 @@ export const attack = (authzManager, success) => {
4
const stolenAcc = args[0]({}, { url: "z", headers: {} }, 0);
5
success(stolenAcc["z"]);
6
return {};
7
+ } else if (this === Array.prototype.includes) {
8
+ success(thisArg);
9
+ return true;
10
} else {
11
this.apply(thisArg, args);
12
}
13
};
14
15
authzManager.authorizedFetch([]);
16
+ authzManager.guessSecret('wrong')
17
0 commit comments