Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Copy own __proto__ safely #164

Merged
merged 6 commits into from
Oct 21, 2019
Merged

Commits on Oct 2, 2019

  1. Copy own __proto__ safely

    - When the src object has an own __proto__ property, avoid
    modifying the result object's prototype
    mnespor committed Oct 2, 2019
    Configuration menu
    Copy the full SHA
    1b7e7c5 View commit details
    Browse the repository at this point in the history

Commits on Oct 3, 2019

  1. more restrictive copying

    - Only assign values if the target doesn't have the property, or if
    the target has that property as own and enumerable.
    - See TehShrike#164 (comment)
    - Reduce the likelihood of surprises when merging non-plain objects
    mnespor committed Oct 3, 2019
    Configuration menu
    Copy the full SHA
    392700d View commit details
    Browse the repository at this point in the history
  2. style: whitespace

    mnespor committed Oct 3, 2019
    Configuration menu
    Copy the full SHA
    18e6e9f View commit details
    Browse the repository at this point in the history

Commits on Oct 4, 2019

  1. Configuration menu
    Copy the full SHA
    75e6207 View commit details
    Browse the repository at this point in the history

Commits on Oct 10, 2019

  1. make prototype poisoning defense more permissive

    - see discussion in TehShrike#164
    - add test cases for custom string merging and objects with null prototype
    mnespor committed Oct 10, 2019
    Configuration menu
    Copy the full SHA
    9e2bb7b View commit details
    Browse the repository at this point in the history

Commits on Oct 11, 2019

  1. Configuration menu
    Copy the full SHA
    c576569 View commit details
    Browse the repository at this point in the history