test: check for prototype pollution

mout · Jun 22, 2022 · ed23d74 · ed23d74
1 parent 93e99c9
commit ed23d74
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/tests/spec/object/spec-set.js b/tests/spec/object/spec-set.js
@@ -31,6 +31,13 @@ define(
                 expect( o.foo ).toEqual( 'bar' );
             });
 
+            it('should be safe from prototype pollution', function () {
+                var o = {};
+                var payload = JSON.parse('["constructor.prototype.polluted"]');
+                set(o, payload, 'bar');
+                expect( o.polluted ).toEqual( undefined );
+            });
+
         });
 
     }