Fix Prototype-polluting assignment

github · Aug 30, 2024 · 92586fa · 92586fa
1 parent 688aa81
commit 92586fa
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/target/braintree-1.3.10.js b/target/braintree-1.3.10.js
@@ -2366,8 +2366,12 @@ sjcl.random = {
       }
     }
 
+    const forbiddenKeys = ['__proto__', 'constructor', 'prototype'];
     for (i=0; i<jsTemp.length; i++) {
       j = jsTemp[i];
+      if (forbiddenKeys.includes(j)) {
+        continue;
+      }
       delete cbs[j];
     }
   },