Prohibit prototype pollution

dexie · Apr 27, 2022 · 1d655a6 · 1d655a6
1 parent b350b8c
commit 1d655a6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/functions/utils.ts b/src/functions/utils.ts
@@ -151,7 +151,7 @@ export function setByKeyPath(obj, keyPath, value) {
                 } else obj[currentKeyPath] = value;
             else {
                 var innerObj = obj[currentKeyPath];
-                if (!innerObj) innerObj = (obj[currentKeyPath] = {});
+                if (!innerObj || !hasOwn(obj, currentKeyPath)) innerObj = (obj[currentKeyPath] = {});
                 setByKeyPath(innerObj, remainingKeyPath, value);
             }
         } else {