joi - npm Package Compare versions

Comparing version 18.2.2 to 18.2.3

lib/types/keys.js

@@ -678,4 +678,11 @@ 'use strict';
 
-        const clone = Object.create(Object.getPrototypeOf(value));
+        const proto = Object.getPrototypeOf(value);
+        const clone = Object.create(proto);
         Object.assign(clone, value);
+
+        // Restore the prototype in case of pre-existing prototype pollution
+        if (Object.getPrototypeOf(clone) !== proto) {
+            Object.setPrototypeOf(clone, proto);
+        }
+
         return clone;
@@ -682,0 +689,0 @@ }

lib/types/string.js

@@ -696,3 +696,15 @@ 'use strict';
 
-                res.pattern = rule.args.regex.source;
+                const pattern = rule.args.regex.source;
+
+                if (res.allOf) {
+                    res.allOf.push({ pattern });
+                }
+                else if (res.pattern !== undefined) {
+                    res.allOf = [{ pattern: res.pattern }, { pattern }];
+                    delete res.pattern;
+                }
+                else {
+                    res.pattern = pattern;
+                }
+
                 return res;
@@ -699,0 +711,0 @@ },

package.json

 {
     "name": "joi",
     "description": "Object schema validation",
-    "version": "18.2.2",
+    "version": "18.2.3",
     "repository": {
@@ -6,0 +6,0 @@ "url": "git://github.com/hapijs/joi.git",

No alert changes

Improved metrics

Total package byte prevSize

1890424

0.04%

Lines of code

16857

0.09%

No dependency changes