Skip to content

Edge case with proto #8

@jacobzim-stl

Description

@jacobzim-stl

I did some fuzz testing with this library and found an edge case.

The JSON string "{\"__proto__\": 0}" is correctly parsed by the native JSON library into { "__proto__": 0 }, but in this library it is parsed into {}.

To solve, in the parseObj function update obj[key] = value; to
Object.defineProperty(obj, key, { value, writable: true, enumerable: true, configurable: true });

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions