mirror of
https://github.com/dawidd6/action-send-mail.git
synced 2026-09-17 09:06:48 +07:00
Dawid Dziurla
44 lines
1.9 KiB
JavaScript
44 lines
1.9 KiB
JavaScript
"use strict";
|
|
// Safe copying of objects whose keys come from the caller.
|
|
//
|
|
// This lives in its own leaf module, like ./url.ts, so that every layer can reach it.
|
|
// src/shared/index.ts imports src/fetch, so src/fetch can not import src/shared back,
|
|
// and src/mime-funcs is a leaf that would otherwise pull in dns/net/os/fs for a string
|
|
// comparison. src/shared/index.ts re-exports both functions for the callers that already
|
|
// depend on it.
|
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
exports.copyOwnKeys = exports.isProtoKey = void 0;
|
|
/**
|
|
* Detects a key that can not be copied onto a plain object with `target[key] = value`.
|
|
*
|
|
* "__proto__" is the only one: assigning it runs the inherited setter and replaces the
|
|
* prototype of the target instead of adding a property to it, so a caller can smuggle
|
|
* values past validation that only inspects own keys. JSON.parse produces such a key
|
|
* where an object literal can not. "constructor" and "prototype" have no such setter and
|
|
* become ordinary own properties, so dropping them would only discard legitimate values.
|
|
*
|
|
* @param key Key to check
|
|
* @returns true if the key must not be copied
|
|
*/
|
|
const isProtoKey = (key) => key === '__proto__';
|
|
exports.isProtoKey = isProtoKey;
|
|
/**
|
|
* Copies own enumerable keys from a source object to a target object. Every copy that
|
|
* walks the keys of user supplied data goes through here, see isProtoKey.
|
|
*
|
|
* @param target Object to copy the keys to
|
|
* @param source Object to copy the keys from
|
|
* @param [skip] Optional predicate, return true to leave a key out
|
|
* @returns The target object
|
|
*/
|
|
const copyOwnKeys = (target, source, skip) => {
|
|
Object.keys(source || {}).forEach(key => {
|
|
if ((0, exports.isProtoKey)(key) || (skip && skip(key))) {
|
|
return;
|
|
}
|
|
target[key] = source[key];
|
|
});
|
|
return target;
|
|
};
|
|
exports.copyOwnKeys = copyOwnKeys;
|