Merge branch '1-npm-obj-unflatten' of https://github.com/418sec/obj-u…

…nflatten into new-version
IonicaBizau · Dec 18, 2020 · 34b7f74 · 34b7f74
2 parents 46bd91c + 00606d7
commit 34b7f74
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/lib/index.js b/lib/index.js
@@ -4,6 +4,16 @@ const iterateObject = require("iterate-object")
     , isUndefined = require("is-undefined")
     ;
 
+
+/**
+ * Returns true, if given key is included in the blacklisted
+ * keys.
+ * @param key key for check, string.
+ */
+function isPrototypePolluted(key) {
+  return ['__proto__', 'prototype', 'constructor'].includes(key);
+}
+
 /**
  * unflattenObject
  * Convert flatten objects in nested ones.
@@ -28,6 +38,8 @@ module.exports = function unflattenObject(flatten, separator) {
           ;
 
         iterateObject(subkeys, subkey => {
+          if (isPrototypePolluted(subkey)) return;
+
             parentObj[subkey] = isUndefined(parentObj[subkey])
                               ? {}
                               : parentObj[subkey]