chore: guard against prototype pollution

qlik-oss · Mar 22, 2022 · 359c883 · 359c883
1 parent 2b888f9
commit 359c883
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apis/conversion/src/utils.js b/apis/conversion/src/utils.js
@@ -54,7 +54,7 @@ const setValue = (data, reference, value) => {
     dataContainer = dataContainer[step];
   }
 
-  if (typeof value !== 'undefined') {
+  if (typeof value !== 'undefined' && propertyName !== '__proto__' && propertyName !== 'constructor') {
     dataContainer[propertyName] = value;
   } else {
     delete dataContainer[propertyName];