Closed dubzzz closed 1 year ago
This isn’t a bug, this is a security feature. When parsing, you can override the default depth option (like you’ve done with arrayLimit) if you want to parse deeper structures.
(separately, keys like toString etc should be fine; if your goal was to prevent those, you’d need to filter out everything on Object.prototype anyways, not just those two)
Let's close the issue, thanks for the answer
Hello 👋
I attempted to run some property based testing tests against the library using fast-check and discovered what seems to be potential bugs of the library.
Here is one of them:
The code that discovered this issue is:
Here is a link to a playable version: https://runkit.com/dubzzz/qs-issue