Please support setPrototypeOf instead of __proto__
Open
- Dominant language
- JavaScript
- Stars
- 874
- Forks
- 62
- PR merge metrics
- No merged PRs in 30d
Description
According to [MDN docs on __proto__](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/proto), all `A.__proto__ = B` should actually be `Object.setPrototypeOf(A, B)`.
`__proto__` is only allowed to keep compatibility, and represents a huge security vulnerability surface.
This would also allow "hardening" nodejs with `--disable-proto=delete|throw`.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.