Protect against constructor modification, #84

kriszyp · kriszyp · commit b62f1da1ff54 · 2021-11-01T20:41:52.000-06:00
diff --git a/lib/validate.js b/lib/validate.js
@@ -207,7 +207,7 @@ var validate = exports._validate = function(/*Any*/instance,/*Object*/schema,/*O
 			}
 			
 			for(var i in objTypeDef){ 
-				if(objTypeDef.hasOwnProperty(i) && i != '__proto__'){
+				if(objTypeDef.hasOwnProperty(i) && i != '__proto__' && i != 'constructor'){
 					var value = instance[i];
 					// skip _not_ specified properties
 					if (value === undefined && options.existingOnly) continue;

Original file line number	Diff line number	Diff line change
`@@ -207,7 +207,7 @@ var validate = exports._validate = function(/Any/instance,/Object/schema,/*O`
`207`	`207`	`}`
`208`	`208`
`209`	`209`	`for(var i in objTypeDef){`
`210`		`- if(objTypeDef.hasOwnProperty(i) && i != '__proto__'){`
	`210`	`+ if(objTypeDef.hasOwnProperty(i) && i != '__proto__' && i != 'constructor'){`
`211`	`211`	`var value = instance[i];`
`212`	`212`	`// skip _not_ specified properties`
`213`	`213`	`if (value === undefined && options.existingOnly) continue;`