1
0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00

[2.2.x] Applied jQuery patch for CVE-2019-11358.

Backport of 34ec52269a from master.
This commit is contained in:
Carlton Gibson
2019-05-27 11:07:46 +02:00
parent afddabf842
commit baaf187a4e
4 changed files with 25 additions and 2 deletions

View File

@@ -261,8 +261,9 @@ jQuery.extend = jQuery.fn.extend = function() {
src = target[ name ];
copy = options[ name ];
// Prevent Object.prototype pollution
// Prevent never-ending loop
if ( target === copy ) {
if ( name === "__proto__" || target === copy ) {
continue;
}

File diff suppressed because one or more lines are too long