@cssxjs/babel-plugin-rn-stylename-inline 0.2.12 → 0.2.14

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+# v0.2.13 (Sat Nov 08 2025)
+
+#### 🐛 Bug Fix
+
+- fix(babel-plugin-rn-stylename-to-style): more strict check for compilers used in the file ([@cray0000](https://github.com/cray0000))
+
+#### Authors: 1
+
+- Pavel Zhukov ([@cray0000](https://github.com/cray0000))
+
+---
+
 # v0.2.12 (Fri Nov 07 2025)
 
 #### 🚀 Enhancement

package/index.js

@@ -28,9 +28,9 @@ const getVisitor = ({ $program, usedCompilers }) => ({
     if (!shouldProcess($this, usedCompilers)) return
 
     // I. validate template
-    validateTemplate($this, usedCompilers)
+    validateTemplate($this)
 
-    const compiler = usedCompilers[$this.node.tag.name]
+    const compiler = usedCompilers.get($this.node.tag.name)
 
     // II. compile template
     const source = $this.node.quasi.quasis[0]?.value?.raw || ''
@@ -90,13 +90,13 @@ function insertAfterImports ($program, expressionStatement) {
   }
 }
 
-function shouldProcess ($template, usedCompilers = {}) {
+function shouldProcess ($template, usedCompilers) {
   if (!$template.get('tag').isIdentifier()) return
-  if (!usedCompilers[$template.node.tag.name]) return
+  if (!usedCompilers.has($template.node.tag.name)) return
   return true
 }
 
-function validateTemplate ($template, usedCompilers = {}) {
+function validateTemplate ($template) {
   const { node: { quasi } } = $template
 
   if (quasi.expressions.length > 0) {
@@ -107,7 +107,7 @@ function validateTemplate ($template, usedCompilers = {}) {
 }
 
 function getUsedCompilers ($program, state) {
-  const res = {}
+  const res = new Map()
   const magicImports = state.opts.magicImports || DEFAULT_MAGIC_IMPORTS
   for (const $import of $program.get('body')) {
     if (!$import.isImportDeclaration()) continue
@@ -115,8 +115,9 @@ function getUsedCompilers ($program, state) {
     for (const $specifier of $import.get('specifiers')) {
       if (!$specifier.isImportSpecifier()) continue
       const { local, imported } = $specifier.node
-      if (compilers[imported.name]) {
-        res[local.name] = compilers[imported.name]
+      // it's important to use hasOwnProperty here to avoid prototype pollution issues, like 'toString'
+      if (Object.prototype.hasOwnProperty.call(compilers, imported.name)) {
+        res.set(local.name, compilers[imported.name])
       }
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cssxjs/babel-plugin-rn-stylename-inline",
-  "version": "0.2.12",
+  "version": "0.2.14",
   "publishConfig": {
     "access": "public"
   },
@@ -26,13 +26,13 @@
     "@babel/parser": "^7.0.0",
     "@babel/template": "^7.4.0",
     "@babel/types": "^7.0.0",
-    "@cssxjs/loaders": "^0.2.12",
-    "@cssxjs/runtime": "^0.2.12"
+    "@cssxjs/loaders": "^0.2.14",
+    "@cssxjs/runtime": "^0.2.14"
   },
   "devDependencies": {
     "@babel/plugin-syntax-jsx": "^7.0.0",
     "babel-plugin-tester": "^9.1.0",
     "jest": "^30.0.4"
   },
-  "gitHead": "353563eb72be74e2911d1343adcda32eceba43e5"
+  "gitHead": "72b2f3d63ebe86ab75b398036ff27f8abe99f1d4"
 }