Merge pull request #1 from alromh87/master

Fix Prototype Pollution
418sec · Oct 19, 2020 · e18b903 · e18b903
2 parents 61a8b9a + 3de26e9
commit e18b903
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/index.ts b/lib/index.ts
@@ -135,6 +135,10 @@ class Y18N {
   }
 
   updateLocale (obj: Locale) {
+    if ('__proto__' === this.locale){
+      throw new Error('Prototype pollution attempt detected');
+    }
+
     if (!this.cache[this.locale]) this._readLocaleFile()
 
     for (const key in obj) {