storyblok / storyblok-js-client

Universal JavaScript client for Storyblok's API
MIT License
125 stars 86 forks source link

Fix: check for ownProperties on Richtext renderer HTML attributes #848

Closed Edo-San closed 1 month ago

Edo-San commented 2 months ago

Pull request type

How to test this PR

What is the new behavior?

This PR fixes a potential security issue related to looping over object properties without assessing if they are object own properties or part of the prototype chain.

notion-workspace[bot] commented 2 months ago

Avoid looping over other prototype chain properties in richtextResolver

github-actions[bot] commented 1 month ago

:tada: This PR is included in version 6.8.2 :tada:

The release is available on:

Your semantic-release bot :package::rocket: