Merge pull request #3122 from eclipse/cd-mit-heap-poll

mitigate pot. prototype pollution problem
eclipse · Aug 18, 2024 · 01fced3 · 01fced3
2 parents d03e0c2 + d85f8ac
commit 01fced3
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/org.eclipse.xtext.web.example.jetty/src/main/webapp/i18n.js b/org.eclipse.xtext.web.example.jetty/src/main/webapp/i18n.js
@@ -74,7 +74,10 @@
     function mixin(target, source, force) {
         var prop;
         for (prop in source) {
-            if (source.hasOwnProperty(prop) && (!target.hasOwnProperty(prop) || force)) {
+            if (prop === '__proto__' || prop === 'constructor') {
+                        continue; // Skip these properties
+            }
+            if (Object.prototype.hasOwnProperty.call(source, prop) && (!Object.prototype.hasOwnProperty.call(target, prop) || force)) {
                 target[prop] = source[prop];
             } else if (typeof source[prop] === 'object') {
                 if (!target[prop] && source[prop]) {