codeburn/tests/security
Ninym e890d9bfc3 test(security): add failing test for HIGH-1 prototype pollution
Three PoC fixtures (tool name, bash command, model name) reproduce
the audit's HIGH-1 attack. Tests assert Object.prototype.calls stays
undefined after parsing. They fail against current parser.ts -- Task 3
will close the pollution sink with Object.create(null).
2026-04-17 08:32:18 +02:00
..
prototype-pollution.test.ts test(security): add failing test for HIGH-1 prototype pollution 2026-04-17 08:32:18 +02:00