Block prototype keywords from key paths (#5)

whitfin · Jul 27, 2022 · 9eda37e · 9eda37e
1 parent 1c87f5e
commit 9eda37e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/create.js b/lib/create.js
@@ -33,6 +33,10 @@ function create(obj, str, val) {
   for (var k = 0; k < last; k++) {
     var key = keys[k];
 
+    if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+      return container;
+    }
+
     if (!tmp[key]) {
       tmp[key] = typed(keys[k + 1]);
     }