Skip to content

Commit d71bbd0

Browse files
author
Sascha Goldhofer
committed
Merge branch 'develop' into release/4.4.0
2 parents e229bdd + 04e6492 commit d71bbd0

File tree

6 files changed

+2293
-8357
lines changed

6 files changed

+2293
-8357
lines changed

dist/gson-query.js

Lines changed: 2 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/gson-query.js.LICENSE.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
/*!isLiteral &*/

lib/set.js

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,9 @@ function set(data, queryString, value, force) {
119119
}
120120

121121
path.forEach((query, index) => {
122+
if ("__proto__" === query || "prototyped" === query || "constructor" === query) {
123+
return;
124+
}
122125
if (isProperty.test(query) === false) {
123126
workingSet = select(workingSet, query);
124127
return;
@@ -141,6 +144,9 @@ function set(data, queryString, value, force) {
141144

142145
} else {
143146
const unescapedProp = removeEscape(property);
147+
if ("__proto__" === unescapedProp || "prototyped" === unescapedProp || "constructor" === unescapedProp) {
148+
return;
149+
}
144150
d[unescapedProp] = targetValue;
145151
}
146152
});

0 commit comments

Comments
 (0)