Merge pull request #9 from github/jibrang/fix-prototype-polluting-ass…

…ignment Fix prototype polluting assignment
github · Aug 30, 2024 · 3f17eb1 · 3f17eb1
2 parents 688aa81 + 92586fa
commit 3f17eb1
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/target/braintree-1.3.10.js b/target/braintree-1.3.10.js
@@ -2366,8 +2366,12 @@ sjcl.random = {
       }
     }
 
+    const forbiddenKeys = ['__proto__', 'constructor', 'prototype'];
     for (i=0; i<jsTemp.length; i++) {
       j = jsTemp[i];
+      if (forbiddenKeys.includes(j)) {
+        continue;
+      }
       delete cbs[j];
     }
   },