Fix sandbox breakout vulnerability

This fixes the vulnerability detailed in this advisory: https://www.npmjs.com/advisories/758
browserify · Feb 14, 2019 · 32f8efd · 32f8efd
1 parent 5bba790
commit 32f8efd
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/index.js b/index.js
@@ -135,6 +135,7 @@ module.exports = function (ast, vars) {
                 if(key.type == 'Identifier'){
                   vars[key.name] = null;
                 }
+                else return FAIL;
             });
             for(var i in bodies){
                 if(walk(bodies[i]) === FAIL){