StyAndCo/zappyzep
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: extra checks for tag get() function

Browse source
This commit is contained in:
Dragory 2023-04-01 21:34:14 +03:00
parent ab54dc215f
commit 3064a05b4d
No known key found for this signature in database
GPG key ID: 5F387BA66DF8AAC1
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
backend/src/utils.ts
View file

@ -578,7 +578,10 @@ export function errorMessage(str, emoji = "⚠") {
export function get(obj, path, def?): any {
let cursor = obj;
const pathParts = path.split(".");
const pathParts = path
.split(".")
.map((s) => s.trim())
.filter((s) => s !== "");
for (const part of pathParts) {
// hasOwnProperty check here is necessary to prevent prototype traversal in tags
if (!cursor.hasOwnProperty(part)) return def;