File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 43794379 // Prevent prototype pollution:
43804380 // https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
43814381 // https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh
4382- // https://github.com/lodash/lodash/security/advisories/GHSA-w36w-cm3g-pc62
43834382 var index = -1,
43844383 length = path.length;
43854384
Original file line number Diff line number Diff line change 43794379 // Prevent prototype pollution:
43804380 // https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
43814381 // https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh
4382- // https://github.com/lodash/lodash/security/advisories/GHSA-w36w-cm3g-pc62
43834382 var index = -1,
43844383 length = path.length;
43854384
Original file line number Diff line number Diff line change 1657716577
1657816578 // Prevent regression for
1657916579 // https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
16580- // https://github.com/lodash/lodash/security/advisories/GHSA-7p9j-vj7v-w7j7
1658116580 QUnit.test('Security: _.omit should not allow modifying prototype or constructor properties', function(assert) {
1658216581 assert.expect(3);
1658316582
2269422693 assert.deepEqual(actual, ['one', '"two"', 'three']);
2269522694 });
2269622695
22697- // Related to https://github.com/lodash/lodash/security/advisories/GHSA-xj2r-5m88-79m3
22696+ // Related to https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc
2269822697 QUnit.test('should not execute code via malicious imports key names', function(assert) {
2269922698 assert.expect(2);
2270022699
2272322722 assert.strictEqual(executed2, false, 'should not execute compact default-parameter expression in imports key');
2272422723 });
2272522724
22726- // Related to https://github.com/lodash/lodash/security/advisories/GHSA-xj2r-5m88-79m3
22725+ // Related to https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc
2272722726 QUnit.test('should not enumerate inherited keys from imports sources', function(assert) {
2272822727 assert.expect(1);
2272922728
2537025369 });
2537125370
2537225371 // Prevent regression for:
25373- // https://github.com/lodash/lodash/security/advisories/GHSA-w36w-cm3g-pc62
25372+ // https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh
2537425373 QUnit.test('Security: _.unset should protect built-in prototype methods on primitive types', function(assert) {
2537525374 assert.expect(11);
2537625375
You can’t perform that action at this time.
0 commit comments