vm2 - npm Package Compare versions

Comparing version 3.6.7 to 3.6.8

CHANGELOG.md

@@ -0,1 +1,5 @@
+v3.6.8 (2019-01-26)
+-------------------
+[fix] Security fixes
+
 v3.6.6 (2019-01-01)
@@ -2,0 +6,0 @@ -------------------

lib/contextify.js

@@ -52,2 +52,16 @@ /* global host */
 
+function fakeLookupGetter(receiver, useLocalLookup) {
+	return function __lookupGetter__(key, value) {
+		const descriptor = (useLocalLookup ? local.Object : host.Object).getOwnPropertyDescriptor(receiver, key);
+		return descriptor && descriptor.get;
+	};
+}
+
+function fakeLookupSetter(receiver, useLocalLookup) {
+	return function __lookupSetter__(key, value) {
+		const descriptor = (useLocalLookup ? local.Object : host.Object).getOwnPropertyDescriptor(receiver, key);
+		return descriptor && descriptor.set;
+	};
+}
+
 const hasInstance = Object[Symbol.hasInstance];
@@ -102,2 +116,4 @@ function instanceOf(value, construct) {
 		if (key === '__defineSetter__') return fakeDefineSetter(receiver);
+		if (key === '__lookupGetter__') return fakeLookupGetter(receiver);
+		if (key === '__lookupSetter__') return fakeLookupSetter(receiver);
 
@@ -146,2 +162,4 @@ try {
 		if (key === '__defineSetter__') return fakeDefineSetter(receiver);
+		if (key === '__lookupGetter__') return fakeLookupGetter(receiver);
+		if (key === '__lookupSetter__') return fakeLookupSetter(receiver);
 
@@ -173,2 +191,4 @@ try {
 		if (key === '__defineSetter__') return fakeDefineSetter(receiver);
+		if (key === '__lookupGetter__') return fakeLookupGetter(receiver);
+		if (key === '__lookupSetter__') return fakeLookupSetter(receiver);
 
@@ -383,2 +403,4 @@ try {
 		if (key === '__defineSetter__') return fakeDefineSetter(receiver, true);
+		if (key === '__lookupGetter__') return fakeLookupGetter(receiver, true);
+		if (key === '__lookupSetter__') return fakeLookupSetter(receiver, true);
 
@@ -432,2 +454,4 @@ try {
 		if (key === '__defineSetter__') return fakeDefineSetter(receiver, true);
+		if (key === '__lookupGetter__') return fakeLookupGetter(receiver, true);
+		if (key === '__lookupSetter__') return fakeLookupSetter(receiver, true);
 
@@ -459,2 +483,4 @@ try {
 		if (key === '__defineSetter__') return fakeDefineSetter(receiver, true);
+		if (key === '__lookupGetter__') return fakeLookupGetter(receiver, true);
+		if (key === '__lookupSetter__') return fakeLookupSetter(receiver, true);
 
@@ -461,0 +487,0 @@ try {

package.json

@@ -16,3 +16,3 @@ {
   ],
-  "version": "3.6.7",
+  "version": "3.6.8",
   "main": "index.js",
@@ -19,0 +19,0 @@ "repository": "github:patriksimek/vm2",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

70309

increased by2.09%

Lines of code

1615

increased by1.51%

No dependency changes