mastercontroller 1.3.25 → 1.3.26

package/MasterControl.js

@@ -146,25 +146,10 @@ class MasterControl {
         // Only freeze in production to allow for easier debugging in development
         const isProduction = process.env.NODE_ENV === 'production';
 
-        if (isProduction) {
-            // Freeze prototypes to prevent prototype pollution attacks
-            try {
-                Object.freeze(Object.prototype);
-                Object.freeze(Array.prototype);
-                Object.freeze(Function.prototype);
-
-                logger.info({
-                    code: 'MC_SECURITY_PROTOTYPE_FROZEN',
-                    message: 'Prototypes frozen in production mode for security'
-                });
-            } catch (err) {
-                logger.warn({
-                    code: 'MC_SECURITY_FREEZE_FAILED',
-                    message: 'Failed to freeze prototypes',
-                    error: err.message
-                });
-            }
-        }
+        // NOTE: Prototype freezing was removed. Freezing Object.prototype/Array.prototype/
+        // Function.prototype breaks third-party libraries (e.g., long, mysql2) that define
+        // properties on their prototypes after framework init. Prototype pollution protection
+        // is handled via input validation in MasterValidator.js instead.
 
         // Add prototype pollution detection utility
         this._detectPrototypePollution = (obj) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mastercontroller",
-  "version": "1.3.25",
+  "version": "1.3.26",
   "description": "Fortune 500 ready Node.js MVC framework with enterprise security, monitoring, and horizontal scaling",
   "main": "MasterControl.js",
   "license": "MIT",