Protect against prototype pollution in core extend utility and markup parser#8578

Open

RinZ27 wants to merge 1 commit into

playcanvas:mainfrom

RinZ27:fix/markup-prototype-pollution

Commits on Apr 10, 2026

Robustness improvements for markup parser and core extend utility. Switched to Debug.warnOnce for forbidden keys to avoid CI noise, and replaced hasOwnProperty with safe Object.prototype calls acro…
RinZ27
committed