mitigate pot. prototype pollution problem

eclipse · Aug 8, 2024 · d85f8ac · d85f8ac
1 parent 7f5d3d5
commit d85f8ac
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/org.eclipse.xtext.web.example.jetty/src/main/webapp/i18n.js b/org.eclipse.xtext.web.example.jetty/src/main/webapp/i18n.js
@@ -74,7 +74,10 @@
  function mixin(target, source, force) {
  var prop;
  for (prop in source) {
- if (source.hasOwnProperty(prop) && (!target.hasOwnProperty(prop) || force)) {
+ if (prop === '__proto__' || prop === 'constructor') {
+ continue; // Skip these properties
+ }
+ if (Object.prototype.hasOwnProperty.call(source, prop) && (!Object.prototype.hasOwnProperty.call(target, prop) || force)) {
  target[prop] = source[prop];
  } else if (typeof source[prop] === 'object') {
  if (!target[prop] && source[prop]) {