7 Commits

Author	SHA1	Message	Date
Peter Steinberger	95dab6e019	fix: harden config prototype-key guards (#22968) (thanks @Clawborn)	2026-02-22 00:25:22 +01:00
Clawborn	e23c08b5f4	Fix prototype pollution in applyMergePatch via blocked key filter ... applyMergePatch in merge-patch.ts iterates Object.entries(patch) without filtering dangerous keys. When a caller passes a JSON-parsed object with a "__proto__" key, the loop assigns result["__proto__"] = value, which replaces the prototype of result and pollutes Object.prototype for the entire process. Add a BLOCKED_KEYS set ({"__proto__", "constructor", "prototype"}) and skip those keys during iteration, matching the guard already present in deepMerge (includes.ts) via isBlockedObjectKey. Adds four tests covering __proto__, constructor, prototype, and nested __proto__ injection. Co-authored-by: Clawborn <tianrun.yang103@gmail.com>	2026-02-22 00:25:22 +01:00
sebslight	f4b2fd00bc	fix(config): harden object-array merge-by-id fallback	2026-02-16 08:24:55 -05:00
不做了睡大觉	cb391f4bdc	fix(config): prevent config.patch from destroying arrays when patch entries lack id (#18030) ... Merged via /review-pr -> /prepare-pr -> /merge-pr. Prepared head SHA: a857df9e32 Co-authored-by: stakeswky <64798754+stakeswky@users.noreply.github.com> Co-authored-by: sebslight <19554889+sebslight@users.noreply.github.com> Reviewed-by: @sebslight	2026-02-16 08:13:51 -05:00
Vignesh Natarajan	8ec0ef5866	fix (gateway/config): merge config.patch object arrays by id	2026-02-14 19:33:48 -08:00
max	8d75a496bf	refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)	2026-02-09 17:02:55 -08:00
Peter Steinberger	31d3aef8d6	fix: prevent config clobbering	2026-01-15 04:06:11 +00:00