Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b4BL3cEPHQTk2McE7C
8 lines
343 B
Plaintext
8 lines
343 B
Plaintext
== 1. A 'defensive' copy made with clone() trusts the argument's own clone() ==
|
|
clone() result is the attacker's object : true
|
|
clone() result class : EvilDate
|
|
|
|
== 2. A copy made with the constructor does not ==
|
|
new Date(getTime()) is the attacker's object : false
|
|
new Date(getTime()) result class : Date
|