[vulnerability][demo][acl][Web Worker] Global ACLs are not applied in web workers
Root Cause
self global object, which is a property of WorkerGlobalScope.prototype === self.__proto__.__proto__, is not properly registered in _globalObjects for ACL
Mitigation
Restrict access to Worker() and SharedWorker() constructors in the window context
[vulnerability][demo][acl][Web Worker] Global ACLs are not applied in web workers
Root Cause
selfglobal object, which is a property ofWorkerGlobalScope.prototype===self.__proto__.__proto__, is not properly registered in_globalObjectsfor ACLMitigation
Restrict access to
Worker()andSharedWorker()constructors in the window context