exclude __proto__

jonschlinkert · Feb 7, 2018 · c873f34 · c873f34
1 parent aef804b
commit c873f34
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/index.js b/index.js
@@ -16,6 +16,10 @@ function defaultsDeep(target, objects) {
 
   function copy(target, current) {
     lazy.forOwn(current, function (value, key) {
+      if (key === '__proto__') {
+        return;
+      }
+
       var val = target[key];
       // add the missing property, or allow a null property to be updated
       if (val == null) {