mquery - npm Package Compare versions

Comparing version 3.2.4 to 3.2.5

History.md

@@ -0,1 +1,5 @@
+3.2.5 / 2021-03-29
+==================
+ * fix(utils): make `mergeClone()` skip special properties like `__proto__` #121 [zpbrent](https://github.com/zpbrent)
+
 3.2.4 / 2021-02-12
@@ -2,0 +6,0 @@ ==================

lib/utils.js

@@ -173,2 +173,5 @@ 'use strict';
     key = keys[i];
+    if (specialProperties.indexOf(key) !== -1) {
+      continue;
+    }
     if ('undefined' === typeof to[key]) {
@@ -175,0 +178,0 @@ to[key] = clone(from[key]);

package.json

 {
   "name": "mquery",
-  "version": "3.2.4",
+  "version": "3.2.5",
   "description": "Expressive query building for MongoDB",
@@ -5,0 +5,0 @@ "main": "lib/mquery.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

247562

increased by0.09%

Lines of code

6328

increased by0.05%

No dependency changes