apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-07-12 21:02:11 +02:00
Code Issues Projects Releases Packages Wiki Activity

feat(dynamic): replace fixed canary with per-spec cryptographically-random canary for enhanced security

Browse source
This commit is contained in:
elipeter 2026-06-01 10:49:32 -05:00
parent e0833537e4
commit 6bca7a7c97
10 changed files with 569 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/dynamic/lang/js_shared.rs
View file

@ -2635,7 +2635,13 @@ pub fn emit_prototype_pollution_harness(_spec: &HarnessSpec) -> HarnessSource {
r#"// Nyx dynamic harness — PROTOTYPE_POLLUTION canary trap (Phase 10 / Track J.8).
{shim}
const NYX_PP_CANARY = '__nyx_canary';
// Per-spec canary (Phase 30 / Track N.0): the runner derives a
// cryptographically-random, per-`spec_hash` canary and passes it in via
// NYX_CANARY, substituting the same value into the payload bytes and the
// oracle match. The '__nyx_canary' fallback keeps this source a
// deterministic function of the spec (cache-safe) and preserves the
// legacy behaviour for any path that does not set the env var.
const NYX_PP_CANARY = process.env.NYX_CANARY || '__nyx_canary';
function nyxPrototypePollutionProbe(value) {{
const p = process.env.NYX_PROBE_PATH;