Nils Knappmeier
7af1c12db6
This commmit adds the runtime options - `allowProtoPropertiesByDefault` (boolean, default: false) and - `allowProtoMethodsByDefault` (boolean, default: false)` which can be used to allow access to prototype properties and functions in general. Specific properties and methods can still be disabled from access via `allowedProtoProperties` and `allowedProtoMethods` by setting the corresponding values to false. The methods `constructor`, `__defineGetter__`, `__defineSetter__`, `__lookupGetter__` and the property `__proto__` will be disabled, even if the allow...ByDefault-options are set to true. In order to allow access to those properties and methods, they have to be explicitly set to true in the 'allowedProto...'-options. A warning is logged when the a proto-access it attempted and denied by default (i.e. if no option is set by the user to make the access decision explicit)
12 lines
441 B
JavaScript
12 lines
441 B
JavaScript
import { extend } from '../utils';
|
|
|
|
/**
|
|
* Create a new object with "null"-prototype to avoid truthy results on prototype properties.
|
|
* The resulting object can be used with "object[property]" to check if a property exists
|
|
* @param {...object} sources a varargs parameter of source objects that will be merged
|
|
* @returns {object}
|
|
*/
|
|
export function createNewLookupObject(...sources) {
|
|
return extend(Object.create(null), ...sources);
|
|
}
|