fix(vulnerability): Prototype Pollution Vulnerability (#105)

* fix: prevent prototype injection/derivatives bugs * fix: indent * fix: indent
FurqanSoftware · Aug 29, 2021 · 46ccc2a · 46ccc2a
1 parent daa2d86
commit 46ccc2a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/index.coffee b/index.coffee
@@ -14,6 +14,10 @@ cleanParsingErrors = (string) =>
 	if typeof done is 'undefined' and typeof options is 'function'
 		done = options
 		options = {}
+
+      if addr == '__proto__'
+              done new Error 'lookup: __proto__ is not allowed to lookup'
+		return
 
 	_.defaults options,
 		follow: 2