fix(core): fixed __proto__ pollution

[hydRAnger]

FIX this vulnerability for Swiper V5:

• https://www.npmjs.com/advisories/1694
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698

refs:

• 9dad273

[lobosan]

Does this also need to check for constructor and prototype like this?
https://github.com/ionic-team/ionic-framework/pull/23344/files

[nolimits4web]

I am afraid that will required a more work and not extend 'proto', 'constructor', 'prototype' props. Plus it needs correctly reference other Swiper instances (required for Thumbs and Controller to work correctly). To be honest last Swiper v5 was released almost a year ago, and I didn't plan new v5 releases for sure. Why just not copy v5 package locally and do the local changes instead?

[lobosan]

@nolimits4web @hydRAnger I thought the one-line code was the fix in version 6 and it seems it would work for v5. Is it possible to deploy a new v5 with this change?

[hydRAnger]

@nolimits4web @hydRAnger I thought the one-line code was the fix in version 6 and it seems it would work for v5. Is it possible to deploy a new v5 with this change?

according to your suggestion, what should I do for now?