Added other variants of the __proto__ string

TooTallNate · Mar 21, 2022 · 5e86ee5 · 5e86ee5
1 parent c571d80
commit 5e86ee5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/test/parse.js b/test/parse.js
@@ -193,6 +193,11 @@ U=</data>
       assert.throws(function () {
         parseFixture('<dict><key>__proto__</key><dict><key>length</key><string>polluted</string></dict></dict>');
       });
+
+      // adding backslash should still be protected.
+      assert.throws(function () {
+        parseFixture('<dict><key>_\_proto_\_</key><dict><key>length</key><string>polluted</string></dict></dict>');
+      });
     });
   });