Securing gpf.attributes.get (#290)

src/attributes.js

@@ -16,18 +16,33 @@ function _gpfAttributesGetFromClass (classConstructor, baseAttributeClass) {
     return {};
 }
 
+function _gpfAttributesGetConstructorFromTruthy (any) {
+    if ("object" !== typeof any) {
+        gpf.Error.invalidParameter();
+    }
+    return any.constructor;
+}
+
+function _gpfAttributesGetConstructorFrom (any) {
+    if (!any) {
+        gpf.Error.invalidParameter();
+    }
+    return _gpfAttributesGetConstructorFromTruthy(any);
+}
+
 /**
  * Get attributes defined for the object / class
  *
  * @param {Object|Function} objectOrClass Object instance or class constructor
  * @param {gpf.attributes.Attribute} [baseAttributeClass] Base attribute class used to filter results
  * @return {Object} Dictionary of attributes grouped per members,
  * the special member $attributes is used for attributes set at the class level.
+ * @throws {gpf.Error.InvalidParameter}
  * @since 0.2.4
  */
 function _gpfAttributesGet (objectOrClass, baseAttributeClass) {
     if ("function" !== typeof objectOrClass) {
-        objectOrClass = objectOrClass.constructor;
+        objectOrClass = _gpfAttributesGetConstructorFrom(objectOrClass);
     }
     return _gpfAttributesGetFromClass(objectOrClass, baseAttributeClass);
 }