fix(security): prototype polution exploit (#217)

webpack · Oct 20, 2022 · a93cf6f · a93cf6f
1 parent 90c7c4b
commit a93cf6f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/parseQuery.js b/lib/parseQuery.js
@@ -26,7 +26,7 @@ function parseQuery(query) {
   }
 
   const queryArgs = query.split(/[,&]/g);
-  const result = {};
+  const result = Object.create(null);
 
   queryArgs.forEach((arg) => {
     const idx = arg.indexOf('=');