Use Object.create(null) for the config object

src/default_config.js

@@ -1,5 +1,7 @@
+import {assign} from 'lodash';
 // Defines the default config values. For more information on these, see the documentation for snoowrap#config()
-export default {
+const config = Object.create(null);
+assign(config, {
   endpoint_domain: 'reddit.com',
   request_delay: 0,
   request_timeout: 30000,
@@ -8,4 +10,6 @@ export default {
   max_retry_attempts: 3,
   warnings: true,
   debug: false
-};
+});
+
+export default config;

src/snoowrap.js

@@ -97,7 +97,7 @@ const snoowrap = class {
   * // sets the request delay to 1000 milliseconds, and suppresses warnings.
   */
   config (options) {
-    const invalid_key = findKey(options, (value, key) => !this._config.hasOwnProperty(key));
+    const invalid_key = findKey(options, (value, key) => !Object.prototype.hasOwnProperty.call(this._config, key));
     if (invalid_key) {
       throw new TypeError(`Invalid config option '${invalid_key}'`);
     }

test/snoowrap.spec.js

@@ -124,6 +124,9 @@ describe('snoowrap', function () {
     it('throws a TypeError if an invalid config option is set', () => {
       expect(() => r.config({invalid_config_option: true})).to.throw(TypeError);
     });
+    it('does not use Object.prototype for the config object', () => {
+      expect(Object.getPrototypeOf(r.config())).to.be.null();
+    });
     it('sets all prototype functions as non-enumerable', () => {
       const ensure_prototype_funcs_arent_enumerable = obj => {
         Object.getOwnPropertyNames(obj.prototype).forEach(funcName => {