Index: extensions/renderer/resources/guest_view/guest_view.js |
diff --git a/extensions/renderer/resources/guest_view/guest_view.js b/extensions/renderer/resources/guest_view/guest_view.js |
index 1f887a746b3572e23d2a7818d236c1f91422070f..939a0b18afcbb554969059aff812ff9e611beebb 100644 |
--- a/extensions/renderer/resources/guest_view/guest_view.js |
+++ b/extensions/renderer/resources/guest_view/guest_view.js |
@@ -45,6 +45,10 @@ function GuestViewImpl(guestView, viewType, guestInstanceId) { |
this.setupOnResize(); |
} |
+// Prevent GuestViewImpl inadvertently inheriting code from the global Object, |
+// allowing a pathway for executing unintended user code execution. |
+GuestViewImpl.prototype.__proto__ = null; |
+ |
// Possible states. |
GuestViewImpl.GuestState = { |
GUEST_STATE_START: 0, |