github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-12-14 20:43:54 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

SECURITY: jquery CVE-2019-11358

Browse Source
This commit is contained in:
Joffrey JAFFEUX 2019-04-24 13:28:38 +02:00
parent e143cc1843
commit 922d93c1d4
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
vendor/assets/javascripts/jquery.js vendored
View File

@ -261,8 +261,9 @@ jQuery.extend = jQuery.fn.extend = function() {
src = target[ name ];
copy = options[ name ];
// Prevent Object.prototype pollution
// Prevent never-ending loop
if ( target === copy ) {
if ( name === "__proto__" || target === copy ) {
continue;
}