20+ curated newsletters
Prototype pollution defense: One test patches Object.prototype.then to intercept promise resolutions, then verifies that pipeTo() and tee() operations don't leak internal values through the prototype chain. This tests a security property that only exists because the spec's promise-heavy internals create an attack surface.
。关于这个话题，heLLoword翻译官方下载提供了深入分析
and explanations
这是a16z在2月最新报告里揭示的一个反差。