-
Notifications
You must be signed in to change notification settings - Fork 7
Open
Labels
good first issueGood for newcomersGood for newcomershelp wantedExtra attention is neededExtra attention is needed
Description
I did some fuzz testing with this library and found an edge case.
The JSON string "{\"__proto__\": 0}"
is correctly parsed by the native JSON library into { "__proto__": 0 }
, but in this library it is parsed into {}
.
To solve, in the parseObj function update obj[key] = value;
to
Object.defineProperty(obj, key, { value, writable: true, enumerable: true, configurable: true });
CNSeniorious000
Metadata
Metadata
Assignees
Labels
good first issueGood for newcomersGood for newcomershelp wantedExtra attention is neededExtra attention is needed