Issues

• String#unescapeHTML() decodes entities after stripping tags, reintroducing markup

  prototypejs/prototype#371 · Filter by author knogineer opened on May 26, 2026
  1

• String#escapeHTML() does not encode quotes, allowing XSS in attribute context

  prototypejs/prototype#370 · Filter by author knogineer opened on May 26, 2026

• OWASP dependency-check (Retire.js) flags every fork of 1.7.3 for CVE-2020-27511, even patched ones — request a tagged 1.7.4 / version bump

  prototypejs/prototype#368 · Filter by author danshome opened on May 13, 2026
  2

• Future and present of Prototype.js

  Discussion
  prototypejs/prototype#363 · Filter by author Sublime1 opened on Nov 7, 2023
  12

• Prototype is no longer compatible with Vue.js

  prototypejs/prototype#362 · Filter by author Sublime1 opened on Nov 2, 2023
  2

• $F throws an error when missing element

  prototypejs/prototype#360 · Filter by author kstubs opened on Apr 27, 2023

• Array.from doesn't work with some iterables

  prototypejs/prototype#359 · Filter by author ecolui opened on Apr 25, 2023
  1

• Element.replace() swaps element and textNode if used inside a table

  prototypejs/prototype#357 · Filter by author Chris78 opened on Feb 2, 2023

• CVE-2020-27511

  prototypejs/prototype#355 · Filter by author matteodelta opened on Jan 14, 2022
  5

• Typescript declarations?

  prototypejs/prototype#354 · Filter by author jblotus opened on Aug 31, 2021

• Warning: Potential Security Risk Ahead https://api.prototypejs.org/

  prototypejs/prototype#352 · Filter by author kressly opened on Jun 1, 2021
  1

• Global.Node has the potential of being overwritten.

  prototypejs/prototype#343 · Filter by author jwestbrook opened on Jul 31, 2018

• Native Array.from is overwritten by $A which is not able to handle all cases used by the native function

  prototypejs/prototype#338 · Filter by author maxwangry opened on Feb 14, 2018
  5

• Object.isNumber returns true on NaN

  prototypejs/prototype#336 · Filter by author BlueEyedRhino opened on Oct 12, 2017
  1

• wrap function with multiple arguments where some arguments are optional

  prototypejs/prototype#335 · Filter by author minesh0111 opened on Oct 12, 2017

• Function tagName not on JQuery object causing "Cannot read property 'toLowerCase' of undefined"

  prototypejs/prototype#334 · Filter by author DarkSnowy opened on Oct 10, 2017

• function fireEvent_DOM throwing "element.dispatchEvent is not a function"

  prototypejs/prototype#333 · Filter by author DarkSnowy opened on Oct 10, 2017

• Ajax.Request.isSameOrigin() check is insecure

  prototypejs/prototype#332 · Filter by author palant opened on Oct 3, 2017

• Not searching for null value for elementClassName in prototypejs 1.7

  prototypejs/prototype#329 · Filter by author Nabarun opened on May 1, 2017

• cloneposition incorrect with scrolled element in 1.7.3

  bug
  prototypejs/prototype#328 · Filter by author hoodie63 opened on Mar 31, 2017 · 1.8.0
  2

• Position.within fails when parent dom tree contains css transformations

  bug
  prototypejs/prototype#322 · Filter by author qsiebers opened on Oct 14, 2016
  2

• Ajax query string, Hash.toQueryPair, and mod_perl

  prototypejs/prototype#309 · Filter by author trevor-indosoft opened on Jan 12, 2016

• Form.Element.activate on MobileSafari doesn't select text

  bug
  prototypejs/prototype#301 · Filter by author savetheclocktower opened on Sep 25, 2015

• Gracefully handle missing elements

  enhancement
  prototypejs/prototype#296 · Filter by author jwestbrook opened on May 7, 2015
  3

• Play nicely with browserify

  enhancement
  prototypejs/prototype#282 · Filter by author EvanCarroll opened on Jan 5, 2015
  3