Mirror: A maybe slightly safer-ish wrapper around eval Function constructors
Update README
+2
-2
+2
-2
README.md
+2
-2
README.md
···
25
25
26
26
It only does three simple things:
27
27
- Isolate the [global object](https://developer.mozilla.org/en-US/docs/Glossary/Global_object) and uses a separate object using a `with` statement
28
-
- Wraps all passed through globals, like `Array`, in a recursive masking object that disallows access to prototype-polluting propeties, such as `constructor`
29
-
- In the browser: Creates an `iframe` element and uses that frame's globals instead
28
+
- Wraps all passed through globals, like `Array`, in a recursive masking object that disallows access to object prototype properties
29
+
- In the browser: Creates an `iframe` element and uses that frame's globals instead to prvent prototype pollution.
30
30
31
31
If you haven't run away screaming yet, maybe that's what you're looking for. Just a bit more safety.
32
32
But really, I wrote this just for fun and I haven't written any tests yet and neither have I tested all edge cases.