From 370d5723e99147c6564ab6b9808a554bfa184587 Mon Sep 17 00:00:00 2001 From: Shivanshu07 Date: Fri, 14 Feb 2025 16:36:08 +0530 Subject: [PATCH] comments addressed --- packages/config/src/utils/normalize.js | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/packages/config/src/utils/normalize.js b/packages/config/src/utils/normalize.js index fb6e01cc6..509acd4d2 100644 --- a/packages/config/src/utils/normalize.js +++ b/packages/config/src/utils/normalize.js @@ -13,6 +13,10 @@ const CAMELCASE_MAP = new Map([ // Regular expression that matches words from boundaries or consecutive casing const WORD_REG = /[a-z]{2,}|[A-Z]{2,}|[0-9]{2,}|[^-_\s]+?(?=[A-Z0-9-_\s]|$)/g; +// Unsafe keys list +const unsafeKeys = ['__proto__', 'constructor', 'prototype', 'toString', 'valueOf', + '__defineGetter__', '__defineSetter__', '__lookupGetter__', '__lookupSetter__']; + // Converts kebab-cased and snake_cased strings to camelCase. export function camelcase(str) { if (typeof str !== 'string') return str; @@ -70,8 +74,6 @@ export function normalize(object, options) { // Utility function to prevent prototype pollution export function isSafeKey(key) { - const unsafeKeys = ['__proto__', 'constructor', 'prototype', 'toString', 'valueOf', - '__defineGetter__', '__defineSetter__', '__lookupGetter__', '__lookupSetter__']; return !unsafeKeys.includes(key); }