Skip to content

[CKEditor 5] Change ckeditor5 language config propety check to handle null prototype #1106

@l-lejman

Description

@l-lejman

Hi
CKEditor 5 uses a null-prototype object when the editor configuration is modified using the editor.config.define() function, in order to prevent prototype pollution vulnerabilities.

https://github.com/ckeditor/ckeditor5/blob/master/packages/ckeditor5-utils/src/config.ts#L198

MathType integration uses hasOwnProperty on the language object from the config, which causes an error when that property is defined using editor.config.define(), as the resulting object has a null prototype and does not include the hasOwnProperty method.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions