• 5.0.1 - 2022-07-13
  

  Changelog

  • Fix incorrect typings for compile get/set methods (#58, thanks to @ haakemon)
  • Fix null values throwing exception when traversing over while getting (#50, thanks to @ reckter)
  • Fix tests for null and undefined assertions (a5706e8)
• 5.0.0 - 2021-10-31
  

  5.0.0 (2021-10-31)

  Bug Fixes

  • Fix prototype pollution (#51)

    • The original, non-mutated objects are now returned if any of the keys __proto__, constructor or prototype are used in a json pointer.

    // returns the unmodified input {}
    jsonpointer.set({}, '/foo/__proto__/boo', 'polluted')

    • When passing non-string arrays to a .set operation, an error is thrown:

    // throws `new Error('Invalid JSON pointer. Must be of type string or number.')`
    jsonpointer.set({}, [['__proto__'], ['__proto__'], 'boo'], 'polluted')

• d0d9af9 Version 5.0.1
• 4a253c0 Adopt strictEqual changes and only return null when the get succeeded
• bad4983 Fix null values throwing exception when traversing over while getting
• a5706e8 test: Always use strictEqual to ensure null and undefined values are asserted correctly
• b8e1e6a fix incorrect typings for compile get/set methods
• c4de620 Merge pull request CLI run_scanner.sh #53 from janl/release/5.0.0
• 84cf173 Merge pull request Added environment variables to define scanner user #52 from janl/fix/test

Compare