Fix prototype-polluting vulnerability

github · Aug 30, 2024 · a549b0e · a549b0e
1 parent 3f17eb1
commit a549b0e
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/target/braintree-1.3.10.js b/target/braintree-1.3.10.js
@@ -2366,10 +2366,9 @@ sjcl.random = {
       }
     }
 
-    const forbiddenKeys = ['__proto__', 'constructor', 'prototype'];
     for (i=0; i<jsTemp.length; i++) {
       j = jsTemp[i];
-      if (forbiddenKeys.includes(j)) {
+      if (j === '__proto__' || j === 'constructor' || j === 'prototype') {
         continue;
       }
       delete cbs[j];