doc-path - npm Package Compare versions

Comparing version 2.1.2 to 2.1.3

package.json

@@ -5,3 +5,3 @@ {
     "description": "A document path library for Node",
-    "version": "2.1.2",
+    "version": "2.1.3",
     "repository": {
@@ -8,0 +8,0 @@ "type": "git",

src/path.js

@@ -40,3 +40,3 @@ 'use strict';
     // If this is clearly a prototype pollution attempt, then refuse to modify the path
-    if (keyPath.startsWith('__proto__') || keyPath.startsWith('constructor')) {
+    if (keyPath.startsWith('__proto__') || keyPath.startsWith('constructor') || keyPath.startsWith('prototype')) {
         return document;
@@ -43,0 +43,0 @@ }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8492

increased by0.41%

No dependency changes