Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: yahoo/serialize-javascript
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v7.0.6
Choose a base ref
...
head repository: yahoo/serialize-javascript
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v7.0.7
Choose a head ref
  • 2 commits
  • 4 files changed
  • 3 contributors

Commits on Jun 30, 2026

  1. fix: reject spoofed RegExp objects with non-string source property 

    A fake RegExp created via Object.create(RegExp.prototype) passes
instanceof RegExp but can supply an object as .source. That object
survives serialize() as executable JS and runs when the consumer
evaluates new RegExp(obj, flags) via toString() coercion. Guard
mirrors the existing URL fix: assert typeof source === 'string'
and throw TypeError otherwise.

Fixes: PSECBUGS-112938
Fixes: PSECBUGS-108887
PR-URL: #222
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
    @redonkulus @claude
    redonkulus and claude authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    5009715 View commit details
    Browse the repository at this point in the history

  2. release: v7.0.7 

    PR-URL: #223
    @okuryu
    okuryu authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    01bec60 View commit details
    Browse the repository at this point in the history
Loading