fix: 🐛 fix prototype pollution

chaijs · Aug 25, 2020 · 21a9046 · 21a9046
1 parent a123018
commit 21a9046
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/index.js b/index.js
@@ -76,6 +76,9 @@ function parsePath(path) {
   var str = path.replace(/([^\\])\[/g, '$1.[');
   var parts = str.match(/(\\\.|[^.]+?)+/g);
   return parts.map(function mapMatches(value) {
+    if (value === "constructor" || value === "__proto__" || value === "prototype") {
+      return {}
+    }
     var regexp = /^\[(\d+)\]$/;
     var mArr = regexp.exec(value);
     var parsed = null;