We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent b74dcaa commit a8c47d4Copy full SHA for a8c47d4
lib/utils/queryparams.js
@@ -33,8 +33,9 @@ module.exports = (req, url) => {
33
34
for (const [name, value] of searchParams.entries()) {
35
// Split parameter name into segments by dot or bracket notation
36
+ /* eslint-disable-next-line */
37
const segments = name.split(/[\.\[\]]+/).filter(Boolean)
-
38
+
39
// Check each segment against the dangerous properties set
40
if (segments.some(segment => DANGEROUS_PROPERTIES.has(segment))) {
41
continue // Skip dangerous property names
0 commit comments