ensure keys are valid when mixing in values

jonschlinkert · Jun 24, 2019 · 90ee1fa · 90ee1fa · hellochrisyou · Oct 30, 2019
1 parent a4bcf3e
commit 90ee1fa
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/index.js b/index.js
@@ -23,7 +23,7 @@ function mixinDeep(target, objects) {
  */
 
 function copy(val, key) {
-  if (key === '__proto__') {
+  if (!isValidKey(key)) {
     return;
   }
 
@@ -46,6 +46,17 @@ function isObject(val) {
   return isExtendable(val) && !Array.isArray(val);
 }
 
+/**
+ * Returns true if `key` is a valid key to use when extending objects.
+ *
+ * @param  {String} `key`
+ * @return {Boolean}
+ */
+
+function isValidKey(key) {
+  return key !== '__proto__' && key !== 'constructor' && key !== 'prototype';
+};
+
 /**
  * Expose `mixinDeep`
  */