fix: prototype pollution issue

typeorm · Aug 29, 2022 · e3aac27 · e3aac27
1 parent ed1f0b9
commit e3aac27
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/util/OrmUtils.ts b/src/util/OrmUtils.ts
@@ -157,6 +157,7 @@ export class OrmUtils {
     ): any {
         if (this.isPlainObject(target) && this.isPlainObject(source)) {
             for (const key of Object.keys(source)) {
+                if (key === "__proto__") continue
                 this.mergeObjectKey(target, key, source[key], memo)
             }
         }