Fix Prototype-polluting assignment

jibrang · jibrang · commit 92586fac00a0 · 2024-08-30T02:06:58.000Z
diff --git a/target/braintree-1.3.10.js b/target/braintree-1.3.10.js
@@ -2366,8 +2366,12 @@ sjcl.random = {
       }
     }
 
+    const forbiddenKeys = ['__proto__', 'constructor', 'prototype'];
     for (i=0; i<jsTemp.length; i++) {
       j = jsTemp[i];
+      if (forbiddenKeys.includes(j)) {
+        continue;
+      }
       delete cbs[j];
     }
   },

Original file line number	Diff line number	Diff line change
`@@ -2366,8 +2366,12 @@ sjcl.random = {`
`2366`	`2366`	`}`
`2367`	`2367`	`}`
`2368`	`2368`
	`2369`	`+ const forbiddenKeys = ['__proto__', 'constructor', 'prototype'];`
`2369`	`2370`	`for (i=0; i<jsTemp.length; i++) {`
`2370`	`2371`	`j = jsTemp[i];`
	`2372`	`+ if (forbiddenKeys.includes(j)) {`
	`2373`	`+ continue;`
	`2374`	`+ }`
`2371`	`2375`	`delete cbs[j];`
`2372`	`2376`	`}`
`2373`	`2377`	`},`