SECURITY: jquery CVE-2019-11358

2019-04-24 13:28:38 +02:00 · 2019-04-24 13:28:38 +02:00 · b484fe7626
parent be88ac8b7e
commit b484fe7626
1 changed files with 2 additions and 1 deletions
--- a/vendor/assets/javascripts/jquery.js
+++ b/vendor/assets/javascripts/jquery.js
@ -261,8 +261,9 @@ jQuery.extend = jQuery.fn.extend = function() {
 				src = target[ name ];
 				copy = options[ name ];

+				// Prevent Object.prototype pollution
 				// Prevent never-ending loop
-				if ( target === copy ) {
+				if ( name === "__proto__" || target === copy  ) {
 					continue;
 				}