fix(util): improve parse logic in supplant()

Fixes #4511.

src/core/util/util.js

@@ -298,7 +298,9 @@ function UtilFactory($document, $timeout, $compile, $rootScope, $$mdAnimate, $in
           r = values;
         try {
           for (var s in p) {
-            r = r[p[s]];
+            if (p.hasOwnProperty(s) ) {
+              r = r[p[s]];
+            }
           }
         } catch (e) {
           r = a;

src/core/util/util.spec.js

@@ -46,6 +46,24 @@ describe('util', function() {
 
     });
 
+    describe('supplant', function() {
+
+      it('should replace with HTML arguments', inject(function($mdUtil) {
+        var param1 = "", param2 = '' +
+              '<md-content>' +
+              '   <md-option ng-repeat="value in values" value="{{value}}">' +
+              '      {{value}}  ' +
+              '   </md-option>  ' +
+              '</md-content>    ';
+        var template = '<div class="md-select-menu-container"><md-select-menu {0}>{1}</md-select-menu></div>';
+        var results = $mdUtil.supplant(template,[param1, param2]);
+        var segment = '<md-select-menu >';  // After supplant() part of the result should be...
+
+        expect( results.indexOf(segment) > -1 ).toBe(true);
+
+      }));
+
+    });
 
     describe('findFocusTarget', function() {