bryntum / support

An issues-only repository for the Bryntum project management component suite which includes powerful Grid, Scheduler, Calendar, Kanban Task Board and Gantt chart components all built in pure JS / CSS / TypeScript
https://www.bryntum.com
54 stars 6 forks source link

Investigate warnings from Github Advanced Security #9946

Open matsbryntse opened 2 months ago

matsbryntse commented 2 months ago

https://codeql.github.com/codeql-query-help/javascript/js-prototype-pollution-utility/

ObjectHelper / Objects, copying between objects


js/prototype-pollution-utility | Properties are   copied from source to dest without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from source to dest without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from i to t without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from e to t without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from i to t without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from e to t without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from source to dest without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from source to dest without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from i to e without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from t to e without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from source to dest without guarding against prototype pollution.
js/prototype-pollution-utility | Properties are copied   from source to dest without guarding against prototype pollution.