Skip to content

[CKEditor 5] Change ckeditor5 language config propety check to handle null prototype #1106

@l-lejman

Description

@l-lejman

Hi
CKEditor 5 uses a null-prototype object when the editor configuration is modified using the editor.config.define() function, in order to prevent prototype pollution vulnerabilities.

https://github.com/ckeditor/ckeditor5/blob/master/packages/ckeditor5-utils/src/config.ts#L198

MathType integration uses hasOwnProperty on the language object from the config, which causes an error when that property is defined using editor.config.define(), as the resulting object has a null prototype and does not include the hasOwnProperty method.

Metadata

Metadata

Assignees

No one assigned

    Labels

    state:acceptedWe'll work on this issue soon

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions