Prototype pollution (Fixed)

[luci-m-666]

Hi,
This package is vulnerable to prototype pollution.

var nessy = require("nessy")
var obj = {}
console.log("Before : " + {}.polluted);
nessy('a/__proto__/polluted', "Yes! Its Polluted", '/', obj);
console.log("After : " + {}.polluted);

Output

Before : undefined
After : Yes! Its Polluted

Fix avoids prototype pollution.

[coveralls]

Coverage decreased (-1.9%) to 75.0% when pulling 269ed15 on luci-m-666:master into e933352 on coderaiser:master.

[coderaiser]

Thanks a lot :)! Merged as 8443c0f, landed in v3.0.1 🎉 .
Is it works for you?

[luci-m-666]

Sure. Happy to be of help.
Thanks