prevent the __proto__ property from being used as a key

github · Aug 30, 2024 · ae19541 · ae19541
1 parent c8ad550
commit ae19541
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/target/braintree-1.3.10.js b/target/braintree-1.3.10.js
@@ -2368,7 +2368,7 @@ sjcl.random = {
 
     for (i=0; i<jsTemp.length; i++) {
       j = jsTemp[i];
-      if (Object.prototype.hasOwnProperty.call(cbs, j)) {
+      if (j !== '__proto__' && j !== 'constructor' && j !== 'prototype') {
         delete cbs[j];
       }
     }