summarylogtreecommitdiffstats
path: root/0004-js2py-pr323-cve-2024-28397.patch
blob: a5946d08d1aabc5852c5b9bdcc56953288496c8a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
From 56e244eb41709dd2591697c4aec12d2ee1858dc6 Mon Sep 17 00:00:00 2001
From: Marven11 <110723864+Marven11@users.noreply.github.com>
Date: Fri, 1 Mar 2024 12:53:58 +0800
Subject: [PATCH 1/2] Minor bug fix.

---
 js2py/constructors/jsobject.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js2py/constructors/jsobject.py b/js2py/constructors/jsobject.py
index c4e0ada3..b1806ea6 100644
--- a/js2py/constructors/jsobject.py
+++ b/js2py/constructors/jsobject.py
@@ -49,7 +49,7 @@ def getOwnPropertyNames(obj):
             raise MakeError(
                 'TypeError',
                 'Object.getOwnPropertyDescriptor called on non-object')
-        return obj.own.keys()
+        return list(obj.own.keys())
 
     def create(obj):
         if not (obj.is_object() or obj.is_null()):

From 45e57e7fee6fedf9ff067b7b386cde0a9dfb4b86 Mon Sep 17 00:00:00 2001
From: Vassilis Vassiliadis <vassilis.vassiliadis@ibm.com>
Date: Wed, 12 Mar 2025 11:38:34 +0000
Subject: [PATCH 2/2] build: bump version to 0.75

Signed-off-by: Vassilis Vassiliadis <vassilis.vassiliadis@ibm.com>
---
 README.md | 7 +++++++
 setup.py  | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index dc72d685..c78e7b9c 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,10 @@
+# This is just a temporary fork of Js2pY
+
+This repository contains a bugfix for [CVE-2024-28397](https://github.com/advisories/GHSA-h95x-26f3-88hr) which [@Marven11](https://github.com/Marven11) implemented in <https://github.com/PiotrDabkowski/Js2Py/pull/323>.
+
+The delta between this repository and Marven11's is that we bump the version of Js2Py to 0.75.
+
+# ORIGINAL Readme
 [![Build Status](https://travis-ci.org/PiotrDabkowski/Js2Py.svg?branch=master)](https://travis-ci.org/PiotrDabkowski/Js2Py) [![Downloads](https://pepy.tech/badge/js2py/month)](https://pepy.tech/project/js2py)
 
 #### Pure Python JavaScript Translator/Interpreter
diff --git a/setup.py b/setup.py
index b496e614..91f8ba7d 100644
--- a/setup.py
+++ b/setup.py
@@ -27,7 +27,7 @@
 # twine upload dist/*
 setup(
     name='Js2Py',
-    version='0.74',
+    version='0.75',
 
     packages=['js2py', 'js2py.utils', 'js2py.prototypes', 'js2py.translators',
               'js2py.constructors', 'js2py.host', 'js2py.es6', 'js2py.internals',