fix truthy prototype values

index.js

@@ -17,16 +17,15 @@ function get(pathname) {
     var hash = this._hash;
     var splat = null;
     var params = {};
-    var staticPath;
     var variablePaths;
 
     for (var i = 0; i < pathSegments.length; i++) {
         var segment = pathSegments[i];
 
         if (!segment && !hash.isSplat) {
             continue;
-        } else if ((staticPath = hash.staticPaths[segment])) {
-            hash = staticPath;
+        } else if (hash.staticPaths.hasOwnProperty(segment)) {
+            hash = hash.staticPaths[segment];
         } else if ((variablePaths = hash.variablePaths)) {
             if (variablePaths.isSplat) {
                 splat = pathSegments.slice(i).join('/');
@@ -84,7 +83,10 @@ function set(pathname, handler) {
             }
         } else {
             hash = (
-                hash.staticPaths[segment] ||
+                (
+                    hash.staticPaths.hasOwnProperty(segment) &&
+                    hash.staticPaths[segment]
+                ) ||
                 (hash.staticPaths[segment] = new RouteNode(hash, segment))
             );
         }

test/index.js

@@ -420,3 +420,23 @@ test('splat routes do not work on variable nodes', function (assert) {
     assert.strictEqual(exception.conflictPath, '/:var/');
     assert.end();
 });
+
+test('does not conflict with prototype', function (assert) {
+    // Arrange
+    var hash = HttpHash();
+
+    function validHandler() {}
+
+    hash.set('/toString/valueOf', validHandler);
+
+    //Act
+    var toStringResult = hash.get('toString');
+    var valueOfResult = hash.get('valueOf');
+    var pathResult = hash.get('/toString/valueOf');
+
+    // Assert
+    assert.strictEqual(toStringResult.handler, null);
+    assert.strictEqual(valueOfResult.handler, null);
+    assert.strictEqual(pathResult.handler, validHandler);
+    assert.end();
+});