min-dash - npm Package Compare versions

Comparing version 3.5.1 to 3.5.2

CHANGELOG.md

@@ -9,2 +9,6 @@ # Changelog
 
+## 3.5.2
+
+* `FIX`: prevent prototype pollution via `merge`
+
 ## 3.5.1
@@ -11,0 +15,0 @@

dist/index.esm.js

@@ -569,2 +569,6 @@ /**
     forEach(source, function (sourceVal, key) {
+      if (key === '__proto__') {
+        return;
+      }
+
       var targetVal = target[key];
@@ -571,0 +575,0 @@

dist/index.js

@@ -573,2 +573,6 @@ 'use strict';
     forEach(source, function (sourceVal, key) {
+      if (key === '__proto__') {
+        return;
+      }
+
       var targetVal = target[key];
@@ -575,0 +579,0 @@

dist/min-dash.js

@@ -575,2 +575,6 @@ (function (global, factory) {
       forEach(source, function (sourceVal, key) {
+        if (key === '__proto__') {
+          return;
+        }
+
         var targetVal = target[key];
@@ -577,0 +581,0 @@

dist/min-dash.min.js

@@ -1,1 +0,1 @@
-!function(n,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t(n.MinDash={})}(this,function(n){"use strict";var r=Object.prototype.toString,e=Object.prototype.hasOwnProperty;function o(n){return void 0===n}function i(n){return"[object Array]"===r.call(n)}function c(n){return"[object Object]"===r.call(n)}function u(n){var t=r.call(n);return"[object Function]"===t||"[object AsyncFunction]"===t||"[object GeneratorFunction]"===t||"[object AsyncGeneratorFunction]"===t||"[object Proxy]"===t}function t(n){if(!i(n))throw new Error("must supply array")}function f(n,t){return e.call(n,t)}function a(n,r){var e;return r=g(r),s(n,function(n,t){if(r(n,t))return e=n,!1}),e}function s(n,t){var r;if(!o(n)){var e=i(n)?O:m;for(var u in n)if(f(n,u)&&!1===t(r=n[u],e(u)))return r}}function l(n,r,e){return s(n,function(n,t){e=r(e,n,t)}),e}function v(n,e){return!!l(n,function(n,t,r){return n&&e(t,r)},!0)}function p(n,r){var e=[];return s(n,function(n,t){e.push(r(n,t))}),e}function y(n){return n&&Object.keys(n)||[]}function d(n,e){var u=2<arguments.length&&void 0!==arguments[2]?arguments[2]:{};return e=j(e),s(n,function(n){var t=e(n)||"_",r=u[t];(r=r||(u[t]=[])).push(n)}),u}function b(t){t=j(t);for(var r={},n=arguments.length,e=new Array(1<n?n-1:0),u=1;u<n;u++)e[u-1]=arguments[u];return s(e,function(n){return d(n,t,r)}),p(r,function(n,t){return n[0]})}var h=b;function j(t){return u(t)?t:function(n){return n[t]}}function g(t){return u(t)?t:function(n){return n===t}}function m(n){return n}function O(n){return Number(n)}function w(){return(w=Object.assign||function(n){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var e in r)Object.prototype.hasOwnProperty.call(r,e)&&(n[e]=r[e])}return n}).apply(this,arguments)}n.flatten=function(n){return Array.prototype.concat.apply([],n)},n.find=a,n.findIndex=function(n,r){r=g(r);var e=i(n)?-1:void 0;return s(n,function(n,t){if(r(n,t))return e=t,!1}),e},n.filter=function(n,r){var e=[];return s(n,function(n,t){r(n,t)&&e.push(n)}),e},n.forEach=s,n.without=function(n,r){return o(n)?[]:(t(n),r=g(r),n.filter(function(n,t){return!r(n,t)}))},n.reduce=l,n.every=v,n.some=function(n,t){return!!a(n,t)},n.map=p,n.keys=y,n.size=function(n){return y(n).length},n.values=function(n){return p(n,function(n){return n})},n.groupBy=d,n.uniqueBy=b,n.unionBy=h,n.sortBy=function(n,o){o=j(o);var i=[];return s(n,function(n,t){for(var r=o(n,t),e={d:r,v:n},u=0;u<i.length;u++){if(r<i[u].d)return void i.splice(u,0,e)}i.push(e)}),p(i,function(n){return n.v})},n.matchPattern=function(n){return function(r){return v(n,function(n,t){return r[t]===n})}},n.debounce=function(r,e){var u,o,i,c;function t(){var n=Date.now(),t=c+e-n;if(0<t)return f(t);r.apply(i,o),u=c=o=i=void 0}function f(n){u=setTimeout(t,n)}return function(){c=Date.now();for(var n=arguments.length,t=new Array(n),r=0;r<n;r++)t[r]=arguments[r];o=t,i=this,u||f(e)}},n.throttle=function(n,t){var r=!1;return function(){r||(n.apply(void 0,arguments),r=!0,setTimeout(function(){r=!1},t))}},n.bind=function(n,t){return n.bind(t)},n.isUndefined=o,n.isDefined=function(n){return void 0!==n},n.isNil=function(n){return null==n},n.isArray=i,n.isObject=c,n.isNumber=function(n){return"[object Number]"===r.call(n)},n.isFunction=u,n.isString=function(n){return"[object String]"===r.call(n)},n.ensureArray=t,n.has=f,n.assign=function(n){for(var t=arguments.length,r=new Array(1<t?t-1:0),e=1;e<t;e++)r[e-1]=arguments[e];return w.apply(void 0,[n].concat(r))},n.pick=function(t,n){var r={},e=Object(t);return s(n,function(n){n in e&&(r[n]=t[n])}),r},n.omit=function(n,r){var e={};return s(Object(n),function(n,t){-1===r.indexOf(t)&&(e[t]=n)}),e},n.merge=function e(u){for(var n=arguments.length,t=new Array(1<n?n-1:0),r=1;r<n;r++)t[r-1]=arguments[r];return t.length&&s(t,function(n){n&&c(n)&&s(n,function(n,t){var r=u[t];c(n)?(c(r)||(r={}),u[t]=e(r,n)):u[t]=n})}),u},Object.defineProperty(n,"__esModule",{value:!0})});
+!function(n,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t(n.MinDash={})}(this,function(n){"use strict";var r=Object.prototype.toString,e=Object.prototype.hasOwnProperty;function o(n){return void 0===n}function i(n){return"[object Array]"===r.call(n)}function c(n){return"[object Object]"===r.call(n)}function u(n){var t=r.call(n);return"[object Function]"===t||"[object AsyncFunction]"===t||"[object GeneratorFunction]"===t||"[object AsyncGeneratorFunction]"===t||"[object Proxy]"===t}function t(n){if(!i(n))throw new Error("must supply array")}function f(n,t){return e.call(n,t)}function a(n,r){var e;return r=g(r),s(n,function(n,t){if(r(n,t))return e=n,!1}),e}function s(n,t){var r;if(!o(n)){var e=i(n)?O:m;for(var u in n)if(f(n,u)&&!1===t(r=n[u],e(u)))return r}}function l(n,r,e){return s(n,function(n,t){e=r(e,n,t)}),e}function v(n,e){return!!l(n,function(n,t,r){return n&&e(t,r)},!0)}function p(n,r){var e=[];return s(n,function(n,t){e.push(r(n,t))}),e}function y(n){return n&&Object.keys(n)||[]}function d(n,e){var u=2<arguments.length&&void 0!==arguments[2]?arguments[2]:{};return e=j(e),s(n,function(n){var t=e(n)||"_",r=u[t];(r=r||(u[t]=[])).push(n)}),u}function b(t){t=j(t);for(var r={},n=arguments.length,e=new Array(1<n?n-1:0),u=1;u<n;u++)e[u-1]=arguments[u];return s(e,function(n){return d(n,t,r)}),p(r,function(n,t){return n[0]})}var h=b;function j(t){return u(t)?t:function(n){return n[t]}}function g(t){return u(t)?t:function(n){return n===t}}function m(n){return n}function O(n){return Number(n)}function w(){return(w=Object.assign||function(n){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var e in r)Object.prototype.hasOwnProperty.call(r,e)&&(n[e]=r[e])}return n}).apply(this,arguments)}n.flatten=function(n){return Array.prototype.concat.apply([],n)},n.find=a,n.findIndex=function(n,r){r=g(r);var e=i(n)?-1:void 0;return s(n,function(n,t){if(r(n,t))return e=t,!1}),e},n.filter=function(n,r){var e=[];return s(n,function(n,t){r(n,t)&&e.push(n)}),e},n.forEach=s,n.without=function(n,r){return o(n)?[]:(t(n),r=g(r),n.filter(function(n,t){return!r(n,t)}))},n.reduce=l,n.every=v,n.some=function(n,t){return!!a(n,t)},n.map=p,n.keys=y,n.size=function(n){return y(n).length},n.values=function(n){return p(n,function(n){return n})},n.groupBy=d,n.uniqueBy=b,n.unionBy=h,n.sortBy=function(n,o){o=j(o);var i=[];return s(n,function(n,t){for(var r=o(n,t),e={d:r,v:n},u=0;u<i.length;u++){if(r<i[u].d)return void i.splice(u,0,e)}i.push(e)}),p(i,function(n){return n.v})},n.matchPattern=function(n){return function(r){return v(n,function(n,t){return r[t]===n})}},n.debounce=function(r,e){var u,o,i,c;function t(){var n=Date.now(),t=c+e-n;if(0<t)return f(t);r.apply(i,o),u=c=o=i=void 0}function f(n){u=setTimeout(t,n)}return function(){c=Date.now();for(var n=arguments.length,t=new Array(n),r=0;r<n;r++)t[r]=arguments[r];o=t,i=this,u||f(e)}},n.throttle=function(n,t){var r=!1;return function(){r||(n.apply(void 0,arguments),r=!0,setTimeout(function(){r=!1},t))}},n.bind=function(n,t){return n.bind(t)},n.isUndefined=o,n.isDefined=function(n){return void 0!==n},n.isNil=function(n){return null==n},n.isArray=i,n.isObject=c,n.isNumber=function(n){return"[object Number]"===r.call(n)},n.isFunction=u,n.isString=function(n){return"[object String]"===r.call(n)},n.ensureArray=t,n.has=f,n.assign=function(n){for(var t=arguments.length,r=new Array(1<t?t-1:0),e=1;e<t;e++)r[e-1]=arguments[e];return w.apply(void 0,[n].concat(r))},n.pick=function(t,n){var r={},e=Object(t);return s(n,function(n){n in e&&(r[n]=t[n])}),r},n.omit=function(n,r){var e={};return s(Object(n),function(n,t){-1===r.indexOf(t)&&(e[t]=n)}),e},n.merge=function e(u){for(var n=arguments.length,t=new Array(1<n?n-1:0),r=1;r<n;r++)t[r-1]=arguments[r];return t.length&&s(t,function(n){n&&c(n)&&s(n,function(n,t){if("__proto__"!==t){var r=u[t];c(n)?(c(r)||(r={}),u[t]=e(r,n)):u[t]=n}})}),u},Object.defineProperty(n,"__esModule",{value:!0})});

package.json

 {
   "name": "min-dash",
-  "version": "3.5.1",
+  "version": "3.5.2",
   "description": "Minimum utility toolbelt",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

57458

increased by0.46%

Lines of code

1924

increased by0.47%

No dependency changes