Keys containing __proto__ are handled inconsistently - Githubissues

kazupon / vue-i18n

:globe_with_meridians: Internationalization plugin for Vue.js

https://kazupon.github.io/vue-i18n/

MIT License

7.24k stars 860 forks source link

Keys containing proto are handled inconsistently #1706

Open alxndrsn opened 2 months ago

alxndrsn commented 2 months ago

Reporting a bug?

PR demonstrating inconsistencies at https://github.com/kazupon/vue-i18n/pull/1705

Expected behavior

Either:

treat keys containing __proto__ this same as any other key, or
reject any key containing __proto__

Reproduction

https://github.com/kazupon/vue-i18n/pull/1705

System Info

N/A

Screenshot

No response

Additional context

Currently the only mention of __proto__ in this repo is at:

https://github.com/kazupon/vue-i18n/blob/68955423d4cbc62c7add4669ea8a166dd0c64ad0/src/install.js#L33

Validations

[X] Read the Contributing Guidelines
[X] Read the Documentation
[X] Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
[X] Check that this is a concrete bug. For Q&A open a GitHub Discussion
[X] The provided reproduction is a minimal reproducible example of the bug.