[15.x] Port ReplyServer traversal guards to FlightClient - #96405
Merged
Conversation
eps1lon
changed the title
Re-vendors the Flight client bundles for the Next.js 15.5.x React with the traversal guard backported in eps1lon/react-secured-mirror#77 (a backport of react/react#37144). getOutlinedModel now verifies each traversed value is a plain object or array with an own property for the path segment before indexing into it, throwing "Invalid reference." otherwise. This is defense-in-depth against prototype-pollution style access when untrusted input reaches the Flight client. The reviveModel change from the upstream PR does not apply on this React line, which revives models through a JSON.parse reviver that already skips __proto__ and only visits own enumerable properties. Only the vendored react-server-dom-webpack/turbopack client bundles change.
eps1lon
force-pushed
the
sebbie/vendor-flight-guards/next-15-5
branch
from
July 30, 2026 21:48
4f80b17 to
d49cef7
Compare
Contributor
Tests PassedCommit: d49cef7 |
eps1lon
marked this pull request as ready for review
July 30, 2026 21:58
gnoff
approved these changes
Jul 31, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backports react/react#37144.