search

tjmehta / 101

A modern JS utility library
MIT License
1.55k stars 75 forks source link

CVE 2021 25943 fix #161

Closed wid closed 2 years ago

wid commented 2 years ago

Hi,

The CVE-2021-25943 security is now 1 year old and raises npm audit issues.

So, I applied the following recommandation:

https://github.com/tjmehta/101/issues/159#issuecomment-932750680

with units tests into this pull request.

Nothing else has been changed. The npm test is still 100%: `

101@1.6.4 test lab -c -l -t 100 -a code .................................................. .................................................. .................................................. ............... 165 tests complete Test duration: 58 ms Assertions count: 608 (verbosity: 3.68) Coverage: 100.00% Can you please accept this PR and publish an npm package accordingly ?

wid commented 2 years ago

Please note that I throw an error when trying to set forbidden keys. This is an explicit way of telling the downstream user should really be sure of overriding forbidden keys.