Fix code scanning alert no. 2: Prototype-polluting function

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Stellarium · Sep 28, 2024 · b8ade14 · b8ade14
1 parent 3915b13
commit b8ade14
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/plugins/RemoteControl/webroot/js/require.js b/plugins/RemoteControl/webroot/js/require.js
@@ -109,6 +109,9 @@ var requirejs, require, define;
     function mixin(target, source, force, deepStringMixin) {
         if (source) {
             eachProp(source, function (value, prop) {
+                if (prop === '__proto__' || prop === 'constructor') {
+                    return;
+                }
                 if (force || !hasProp(target, prop)) {
                     if (deepStringMixin && typeof value === 'object' && value &&
                         !isArray(value) && !isFunction(value) &&