Date: March 6, 2026
Reproducer:
for(function(){r({/a/;0;1)1| From 55165c8b2834ca46901b38a2910f0502a35a9bc3 Mon Sep 17 00:00:00 2001 | |
| From: Dmitry Volyntsev <xeioex@nginx.com> | |
| Date: Thu, 5 Mar 2026 20:44:02 -0800 | |
| Subject: [PATCH 1/2] Modules: added var alias for variables object. | |
| This allows to reference nginx variables with a shorter | |
| syntax: `r.var.uri` or `s.var.bytes_sent`. | |
| --- | |
| nginx/ngx_http_js_module.c | 24 ++++++++++++++++++++++++ | |
| nginx/ngx_stream_js_module.c | 24 ++++++++++++++++++++++++ |
Spec compliance: ECMAScript requires arguments (including their side effects) to be evaluated before the callee's callability is checked. The old call lowering created the frame first, which threw non-callable errors before argument side effects ran.
Enable await in call arguments and tagged templates: The old frame-first
| proxy listening :9000 -> 127.0.0.1:9001 | |
| [16:49:23.059] #1 new: 127.0.0.1:40812 -> 127.0.0.1:9001 | |
| [16:49:23.059] #1 C->S: POST /mcp HTTP/1.1 | |
| Host: 127.0.0.1:9000 | |
| User-Agent: Go-http-client/1.1 | |
| Content-Length: 190 | |
| Accept: application/json, text/event-stream | |
| Content-Type: application/json | |
| Accept-Encoding: gzip | |
| --- | |
| # This workflow uses actions that are not certified by GitHub. They are provided by a third-party and are governed by separate terms of service, privacy policy, and support documentation. | |
| name: OSSF Scorecard | |
| on: | |
| # For Branch-Protection check. Only the default branch is supported. See https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection. | |
| branch_protection_rule: | |
| # To guarantee Maintained check is occasionally updated. See https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained. | |
| schedule: | |
| - cron: "0 0 * * 1" | |
| push: |