resolve-shims: prevent prototype manipulation (#246)

thlorenz · Oct 14, 2022 · 97855e6 · 97855e6
1 parent bae7ece
commit 97855e6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/resolve-shims.js b/lib/resolve-shims.js
@@ -123,6 +123,11 @@ function separateExposeGlobals(shims) {
     , exposeGlobals = {};
 
   Object.keys(shims).forEach(function (k) {
+    // https://github.com/thlorenz/browserify-shim/issues/245
+    if (k === '__proto__' || k === 'constructor') {
+      return;
+    }
+
     var val = shims[k]
       , exp = val && val.exports;