Security: Prototype pollution via untrusted YAML user-config keys#1494

Merged

CodFrm merged 2 commits into

scriptscat:mainfrom

qdzsh:fix/security/prototype-pollution-via-untrusted-yaml-u

Jun 10, 2026

Commits on Jun 9, 2026

fix(security)(pkg): prototype pollution via untrusted yaml user-config
qdzsh
committed

Commits on Jun 10, 2026

address review: use Reflect.has(Object.prototype) and fix error message
qdzsh
committed