dojo - npm Package Compare versions

Comparing version 1.15.2 to 1.15.3

_base/kernel.js

@@ -95,3 +95,3 @@ define(["../global", "../has", "./config", "require", "module"], function(global, has, config, require, module){
 
-		major: 1, minor: 15, patch: 2, flag: "",
+		major: 1, minor: 15, patch: 3, flag: "",
 		revision: rev ? rev[0] : NaN,
@@ -98,0 +98,0 @@ toString: function(){

package.json

 {
 	"name": "dojo",
-	"version": "1.15.2",
+	"version": "1.15.3",
 	"directories": {
@@ -14,3 +14,3 @@ "lib": "."
 		"sinon": "1.12.2",
-		"dojo": "1.15.2"
+		"dojo": "1.15.3"
 	},
@@ -17,0 +17,0 @@ "main": "main",

request/util.js

@@ -47,3 +47,3 @@ define([
   			    sval = source[name];
-			if (tval !== sval) {
+			if (name !== '__proto__' && tval !== sval) {
 				if (shouldDeepCopy(sval)) {
@@ -50,0 +50,0 @@ if (Object.prototype.toString.call(sval) === '[object Date]') { // use this date test to handle crossing frame boundaries

tests/unit/request/util.js

@@ -37,2 +37,8 @@ define([
 
+		'.deepCopy should ignore the __proto__ property': function() {
+			var payload = JSON.parse('{ "__proto__": { "protoPollution": true }}');
+			util.deepCopy({}, payload);
+			assert.isUndefined(({}).protoPollution);
+		},
+
 		'deepCopy with FormData': function(){
@@ -39,0 +45,0 @@ if (has('native-formdata')) {

No alert changes

Improved metrics

Total package byte prevSize

4651074

increased by0.01%

Lines of code

138360

No dependency changes