SECURITY: jquery CVE-2019-11358

This commit is contained in:
Joffrey JAFFEUX
2019-04-24 13:28:38 +02:00
committed by GitHub
parent be88ac8b7e
commit b484fe7626

View File

@@ -261,8 +261,9 @@ jQuery.extend = jQuery.fn.extend = function() {
src = target[ name ];
copy = options[ name ];
// Prevent Object.prototype pollution
// Prevent never-ending loop
if ( target === copy ) {
if ( name === "__proto__" || target === copy ) {
continue;
}