@vendure/core/dist/common/safe-assign.js

A modern, headless ecommerce framework

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.safeAssign = safeAssign;
/**
 * Safely assigns a property to an object, preventing prototype pollution.
 *
 * This function guards against prototype pollution by:
 * 1. Blocking dangerous property names (__proto__, constructor, prototype)
 * 2. Using Object.defineProperty for safer assignment instead of direct assignment
 *
 * @param target - The target object to assign the property to
 * @param key - The property key to assign
 * @param value - The value to assign to the property
 */
function safeAssign(target, key, value) {
    // Guard against prototype pollution by blocking dangerous property names
    if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
        return;
    }
    // Use Object.defineProperty for safer assignment
    Object.defineProperty(target, key, {
        value,
        writable: true,
        enumerable: true,
        configurable: true,
    });
}
//# sourceMappingURL=safe-assign.js.map