fast-copy not compatible with NodeJS's --disable-proto=throw option

planttheidea / fast-copy

A blazing fast deep object copier

MIT License

1.13k stars 31 forks source link

fast-copy not compatible with NodeJS's --disable-proto=throw option #79

Closed castarco closed 1 year ago

castarco commented 1 year ago

When running NodeJS with --disable-proto option, fast-copy fails due to an access to the __proto__ property. Many people need/want to avoid this kind of access because it facilitates "prototype pollution" attacks.

https://learn.snyk.io/lessons/prototype-pollution/javascript/

planttheidea commented 1 year ago

The fix you submitted has been released as part of 3.0.1. Thank you very much for your contribution! If you have any more issues, please let me know.