test: CWE-1321

wollardj · Mar 31, 2022 · c5b4db0 · c5b4db0
1 parent 3ad9688
commit c5b4db0
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/__tests__/CWE-1321.test.ts b/__tests__/CWE-1321.test.ts
@@ -0,0 +1,16 @@
+import plist from "../src";
+
+/** @see https://cwe.mitre.org/data/definitions/1321.html */
+
+describe("CWE-1321", () => {
+  it("filters out unsafe properties", () => {
+    const unsafeDoc = { __proto__: 42, foo: "bar" };
+    const safeDoc = plist.parse(plist.stringify(unsafeDoc));
+
+    expect(safeDoc).toMatchInlineSnapshot(`
+      Object {
+        "foo": "bar",
+      }
+    `);
+  });
+});