@fluentui-react-native/memo-cache - npm Package Compare versions

Comparing version 1.3.2 to 1.3.3

CHANGELOG.json

@@ -5,3 +5,18 @@ {
     {
-      "date": "Fri, 01 Mar 2024 20:32:25 GMT",
+      "date": "Wed, 29 Jan 2025 18:37:51 GMT",
+      "version": "1.3.3",
+      "tag": "@fluentui-react-native/memo-cache_v1.3.3",
+      "comments": {
+        "patch": [
+          {
+            "author": "[e-mail]",
+            "package": "@fluentui-react-native/memo-cache",
+            "commit": "86ea35573022bbbf120e16d4999b799a1a5938ac",
+            "comment": "Potential fix for code scanning alert no. 3: Prototype-polluting assignment"
+          }
+        ]
+      }
+    },
+    {
+      "date": "Fri, 01 Mar 2024 20:39:11 GMT",
       "version": "1.3.2",
@@ -8,0 +23,0 @@ "tag": "@fluentui-react-native/memo-cache_v1.3.2",

CHANGELOG.md

 # Change Log - @fluentui-react-native/memo-cache
 
-This log was last generated on Fri, 01 Mar 2024 20:32:25 GMT and should not be manually modified.
+<!-- This log was last generated on Wed, 29 Jan 2025 18:37:51 GMT and should not be manually modified. -->
 
 <!-- Start content -->
 
+## 1.3.3
+
+Wed, 29 Jan 2025 18:37:51 GMT
+
+### Patches
+
+- Potential fix for code scanning alert no. 3: Prototype-polluting assignment ([e-mail])
+
 ## 1.3.2
 
-Fri, 01 Mar 2024 20:32:25 GMT
+Fri, 01 Mar 2024 20:39:11 GMT
 
@@ -11,0 +19,0 @@ ### Patches

lib-commonjs/getCacheEntry.js

@@ -10,2 +10,5 @@ "use strict";
 function ensureAndReturn(entry, key) {
+    if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+        throw new Error('Invalid key');
+    }
     return (entry[key] = entry[key] || {});
@@ -12,0 +15,0 @@ }

lib/getCacheEntry.js

@@ -7,2 +7,5 @@ /**
 function ensureAndReturn(entry, key) {
+    if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+        throw new Error('Invalid key');
+    }
     return (entry[key] = entry[key] || {});
@@ -9,0 +12,0 @@ }

package.json

 {
   "name": "@fluentui-react-native/memo-cache",
-  "version": "1.3.2",
+  "version": "1.3.3",
   "description": "Layered memoization style cache helper",
@@ -5,0 +5,0 @@ "repository": {

src/getCacheEntry.ts

@@ -25,2 +25,5 @@ export type CacheEntry<T, TGet = any> = {
 function ensureAndReturn(entry: CacheEntry<any>, key: keyof CacheEntry<any>): CacheEntry<any> | { [key: string]: CacheEntry<any> } {
+  if ((key as string) === '__proto__' || (key as string) === 'constructor' || (key as string) === 'prototype') {
+    throw new Error('Invalid key');
+  }
   return (entry[key] = entry[key] || {});
@@ -27,0 +30,0 @@ }

No alert changes

Improved metrics

Total package byte prevSize

103542

1.27%

Lines of code

1700

1.43%

No dependency changes