Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

如何处理 js 沙箱逃逸问题 #2974

Closed
asyncguo opened this issue Jun 18, 2024 · 1 comment
Closed

如何处理 js 沙箱逃逸问题 #2974

asyncguo opened this issue Jun 18, 2024 · 1 comment

Comments

@asyncguo
Copy link

What happens?

目前 qiankun 的 js 沙箱在处理隔离上,还存在些沙箱逃逸问题,请问有什么好的办法统一处理这些问题吗?

  • 原型链逃逸,子应用修改原型方法会污染主应用
// 子应用上修改原型方法
({}).prototype.toString = () => 'test'
  • 子应用修改多层对象属性,会污染主应用
// 子应用上修改对象属性
window.history.pushState  = () => { ... }

相关环境信息

  • qiankun 版本 2.10.16
  • 浏览器版本:Mac OS
  • 操作系统:Chrome 125
Copy link

由于缺乏足够的信息(github、stackblitz、codesandbox等可复现仓库),我们暂时关闭了该 Issue。请修改(不要回复) Issue 提供最小重现以重新开启。谢谢。如果只是单独的技术咨询,可移步 https://qiankun.umijs.org/#-community 交流~

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Jun 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant