From f4e48a232fae900237c3e5ff7b57ce9e1c734de1 Mon Sep 17 00:00:00 2001 From: Michael Cebrian Date: Thu, 20 Oct 2022 15:40:25 -0400 Subject: [PATCH] fix: Resolve potential prototype polution exploit --- lib/parseQuery.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/parseQuery.js b/lib/parseQuery.js index fdca007..4a201a2 100644 --- a/lib/parseQuery.js +++ b/lib/parseQuery.js @@ -26,7 +26,7 @@ function parseQuery(query) { } const queryArgs = query.split(/[,&]/g); - const result = {}; + const result = Object.create(null); queryArgs.forEach((arg) => { const idx = arg.indexOf('=');