lib: use StringPrototypeStartsWith from primordials in locks

kimtaejin3 · aduh95 · commit 069874bdbd8f · 2026-02-22T23:16:12.000+01:00
Use StringPrototypeStartsWith from primordials instead of String.prototype.startsWith to prevent prototype pollution. Refs: #59699 PR-URL: #61492 Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
diff --git a/lib/internal/locks.js b/lib/internal/locks.js
@@ -159,7 +159,7 @@ class LockManager {
       signal.throwIfAborted();
     }
 
-    if (name.startsWith('-')) {
+    if (name[0] === '-') {
       // If name starts with U+002D HYPHEN-MINUS (-), then reject promise with a
       // "NotSupportedError" DOMException.
       throw lazyDOMException('Lock name may not start with hyphen',

Original file line number	Diff line number	Diff line change
`@@ -159,7 +159,7 @@ class LockManager {`
`159`	`159`	`signal.throwIfAborted();`
`160`	`160`	`}`
`161`	`161`
`162`		`- if (name.startsWith('-')) {`
	`162`	`+ if (name[0] === '-') {`
`163`	`163`	`// If name starts with U+002D HYPHEN-MINUS (-), then reject promise with a`
`164`	`164`	`// "NotSupportedError" DOMException.`
`165`	`165`	`throw lazyDOMException('Lock name may not start with hyphen',`