Prohibit prototype pollution in dexie-cloud-common

dexie · Apr 27, 2022 · ad18b19 · ad18b19
1 parent 7e03b78
commit ad18b19
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libs/dexie-cloud-common/src/utils.ts b/libs/dexie-cloud-common/src/utils.ts
@@ -37,7 +37,7 @@ export function setByKeyPath(
         //@ts-ignore: even if currentKeyPath would be numeric string and obj would be array - it works.
         var innerObj = obj[currentKeyPath];
         //@ts-ignore: even if currentKeyPath would be numeric string and obj would be array - it works.
-        if (!innerObj) innerObj = obj[currentKeyPath] = {};
+        if (!innerObj || !hasOwn(obj, currentKeyPath)) innerObj = (obj[currentKeyPath] = {});
         setByKeyPath(innerObj, remainingKeyPath, value);
       }
     } else {