fix: prototype pollution issue (typeorm#6096)

zaro · Jan 12, 2021 · b3e2e99 · b3e2e99
1 parent f8aecbe
commit b3e2e99
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/util/OrmUtils.ts b/src/util/OrmUtils.ts
@@ -75,7 +75,7 @@ export class OrmUtils {
         if (this.isObject(target) && this.isObject(source)) {
             for (const key in source) {
                 const value = source[key];
-                if (value instanceof Promise)
+                if (key === "__proto__" || value instanceof Promise)
                     continue;
 
                 if (this.isObject(value)