copying: fold in graph copying (shared nodes, cycles, identity-map fix), serialization rules (constructors, record canonical constructor, ObjectInputFilter), record array components, clone() as a defensive copy, two more compile-error exhibits; 24 tests

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b4BL3cEPHQTk2McE7C
2026-11-12 20:29:58 +05:30
parent 38fbd513c9
commit c8588ae520
17 changed files with 442 additions and 11 deletions
@@ -0,0 +1,7 @@
+== 1. A 'defensive' copy made with clone() trusts the argument's own clone() ==
+  clone() result is the attacker's object : true
+  clone() result class                    : EvilDate
+
+== 2. A copy made with the constructor does not ==
+  new Date(getTime()) is the attacker's object : false
+  new Date(getTime()) result class             : Date