fix(core): fixed __proto__ pollution

nolimits4web · Mar 25, 2021 · 9dad273 · 9dad273 · lobosan · Jun 17, 2021
1 parent 3aad554
commit 9dad273
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/utils/utils.js b/src/utils/utils.js
@@ -92,7 +92,7 @@ function extend(...args) {
   for (let i = 1; i < args.length; i += 1) {
     const nextSource = args[i];
     if (nextSource !== undefined && nextSource !== null) {
-      const keysArray = Object.keys(Object(nextSource));
+      const keysArray = Object.keys(Object(nextSource)).filter((key) => key !== '__proto__');
       for (let nextIndex = 0, len = keysArray.length; nextIndex < len; nextIndex += 1) {
         const nextKey = keysArray[nextIndex];
         const desc = Object.getOwnPropertyDescriptor(nextSource, nextKey);