@react-devtools-plus/kit 0.9.4 → 0.9.6

package/dist/index.cjs

@@ -105,9 +105,28 @@ function getFiberFromElement(element) {
 //#endregion
 //#region src/core/context/index.ts
 /**
+* Properties that can cause prototype pollution and should be filtered out
+* SuperJSON will throw an error if these properties are present in the object
+*/
+const DANGEROUS_PROPERTIES$1 = new Set([
+	"constructor",
+	"__proto__",
+	"prototype"
+]);
+/**
+* Check if a property key is safe to serialize (not a prototype pollution risk)
+*/
+function isSafePropertyKey$1(key) {
+	return !DANGEROUS_PROPERTIES$1.has(key);
+}
+/**
 * Serialize a value into a displayable PropValue
+* @param value - The value to serialize
+* @param depth - Current recursion depth
+* @param maxDepth - Maximum recursion depth
+* @param context - Optional context to collect warnings about filtered properties
 */
-function serializeValue$1(value, depth = 0, maxDepth = 6) {
+function serializeValue$1(value, depth = 0, maxDepth = 6, context) {
 	if (value === null) return {
 		type: "null",
 		value: "null"
@@ -150,7 +169,7 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 	if (Array.isArray(value)) {
 		const children = {};
 		value.forEach((item, index) => {
-			children[String(index)] = serializeValue$1(item, depth + 1, maxDepth);
+			children[String(index)] = serializeValue$1(item, depth + 1, maxDepth, context);
 		});
 		return {
 			type: "array",
@@ -166,10 +185,13 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 				value: `<${((_value$type = value.type) === null || _value$type === void 0 ? void 0 : _value$type.displayName) || ((_value$type2 = value.type) === null || _value$type2 === void 0 ? void 0 : _value$type2.name) || value.type || "Unknown"} />`
 			};
 		}
-		const keys = Object.keys(value);
+		const allKeys = Object.keys(value);
+		const safeKeys = allKeys.filter(isSafePropertyKey$1);
+		const filteredKeys = allKeys.filter((key) => !isSafePropertyKey$1(key));
+		if (context && filteredKeys.length > 0) filteredKeys.forEach((key) => context.filteredProperties.add(key));
 		const children = {};
-		for (const key of keys) try {
-			children[key] = serializeValue$1(value[key], depth + 1, maxDepth);
+		for (const key of safeKeys) try {
+			children[key] = serializeValue$1(value[key], depth + 1, maxDepth, context);
 		} catch (_unused) {
 			children[key] = {
 				type: "unknown",
@@ -179,7 +201,7 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 		return {
 			type: "object",
 			value: `Object`,
-			preview: keys.length > 0 ? `{${keys.slice(0, 3).join(", ")}${keys.length > 3 ? ", ..." : ""}}` : "{}",
+			preview: safeKeys.length > 0 ? `{${safeKeys.slice(0, 3).join(", ")}${safeKeys.length > 3 ? ", ..." : ""}}` : "{}",
 			children: Object.keys(children).length > 0 ? children : void 0
 		};
 	}
@@ -189,6 +211,23 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 	};
 }
 /**
+* Serialize a context value and collect any warnings
+*/
+function serializeContextValue(value) {
+	const context = { filteredProperties: /* @__PURE__ */ new Set() };
+	const propValue = serializeValue$1(value, 0, 6, context);
+	const warnings = [];
+	for (const property of context.filteredProperties) warnings.push({
+		type: "filtered_property",
+		property,
+		message: `Property "${property}" was hidden to prevent prototype pollution errors. This does not affect your application.`
+	});
+	return {
+		propValue,
+		warnings
+	};
+}
+/**
 * Get the display name of a Context
 */
 function getContextDisplayName(fiber) {
@@ -264,10 +303,11 @@ function buildProviderInfo(fiber, visited) {
 	const consumers = [];
 	if (fiber.child) findConsumers(fiber.child, contextType, consumers, /* @__PURE__ */ new WeakSet());
 	const uniqueConsumers = consumers.filter((consumer, index, self) => index === self.findIndex((c) => c.id === consumer.id));
+	const { propValue, warnings } = serializeContextValue(getContextValue(fiber));
 	const info = {
 		id: getFiberId(fiber),
 		name: getContextDisplayName(fiber),
-		value: serializeValue$1(getContextValue(fiber)),
+		value: propValue,
 		fiberId: getFiberId(fiber),
 		consumerCount: uniqueConsumers.length,
 		consumers: uniqueConsumers,
@@ -276,7 +316,8 @@ function buildProviderInfo(fiber, visited) {
 			fileName: fiber._debugSource.fileName,
 			lineNumber: fiber._debugSource.lineNumber,
 			columnNumber: fiber._debugSource.columnNumber
-		} : void 0
+		} : void 0,
+		warnings: warnings.length > 0 ? warnings : void 0
 	};
 	const findNestedProviders = (child) => {
 		var _child$type;
@@ -361,6 +402,21 @@ function getAllContexts(root) {
 //#endregion
 //#region src/core/fiber/details.ts
 /**
+* Properties that can cause prototype pollution and should be filtered out
+* SuperJSON throws: "Detected property constructor. This is a property pollution risk"
+*/
+const DANGEROUS_PROPERTIES = new Set([
+	"constructor",
+	"__proto__",
+	"prototype"
+]);
+/**
+* Check if a property key is safe to serialize (not a prototype pollution risk)
+*/
+function isSafePropertyKey(key) {
+	return !DANGEROUS_PROPERTIES.has(key);
+}
+/**
 * Serialize a value into a displayable PropValue
 */
 function serializeValue(value, depth = 0, maxDepth = 8) {
@@ -422,7 +478,7 @@ function serializeValue(value, depth = 0, maxDepth = 8) {
 				value: `<${((_value$type = value.type) === null || _value$type === void 0 ? void 0 : _value$type.displayName) || ((_value$type2 = value.type) === null || _value$type2 === void 0 ? void 0 : _value$type2.name) || value.type || "Unknown"} />`
 			};
 		}
-		const keys = Object.keys(value);
+		const keys = Object.keys(value).filter(isSafePropertyKey);
 		const children = {};
 		for (const key of keys) try {
 			children[key] = serializeValue(value[key], depth + 1, maxDepth);
@@ -1586,7 +1642,7 @@ function extractRouteFromElement(element, parentPath = "") {
 	return routeInfo;
 }
 /**
-* Extract routes from Routes component's children prop
+* Extract routes from Routes component's children prop (React Router v6)
 */
 function extractRoutesFromProps(props) {
 	const routes = [];
@@ -1602,6 +1658,181 @@ function extractRoutesFromProps(props) {
 	return routes;
 }
 /**
+* Get component name from React Router v5 Route props
+*/
+function getV5ComponentName(props) {
+	if (props.component) return props.component.name || props.component.displayName;
+	if (props.render) return "render()";
+	if (typeof props.children === "function") return "children()";
+}
+/**
+* Check if a component is likely a React Router v5 Route by its props
+*/
+function isLikelyV5Route(props) {
+	if (!props) return false;
+	const hasPath = typeof props.path === "string" || props.path === void 0;
+	const hasRouteProps = props.component || props.render || props.children !== void 0;
+	const hasExactOrStrict = props.exact !== void 0 || props.strict !== void 0;
+	const hasLocation = props.location !== void 0;
+	const hasComputedMatch = props.computedMatch !== void 0;
+	return hasPath && hasRouteProps || hasExactOrStrict || hasComputedMatch || hasLocation;
+}
+/**
+* Check if a component is likely a React Router v5 Switch by its props/children
+*/
+function isLikelyV5Switch(props) {
+	if (!props || !props.children) return false;
+	const children = Array.isArray(props.children) ? props.children : [props.children];
+	for (const child of children) if (child && child.props) {
+		if (isLikelyV5Route(child.props)) return true;
+	}
+	return false;
+}
+/**
+* Check if a component is likely a React Router v5 Redirect by its props
+*/
+function isLikelyV5Redirect(props) {
+	if (!props) return false;
+	return typeof props.to === "string" || typeof props.to === "object" && props.to !== null;
+}
+/**
+* Check if a fiber node is a React Router v5 context provider
+* React Router v5 uses __RouterContext with value containing { history, location, match, staticContext }
+*/
+function isRouterContextProvider(fiber) {
+	const props = fiber.memoizedProps || fiber.pendingProps;
+	if (!(props === null || props === void 0 ? void 0 : props.value)) return false;
+	const value = props.value;
+	return !!(value.history && value.location && typeof value.match === "object");
+}
+/**
+* Check if a fiber node is a React Router v5 Route context provider
+* Route wraps children in a context provider with match info
+*/
+function isRouteContextProvider(fiber) {
+	const props = fiber.memoizedProps || fiber.pendingProps;
+	if (!(props === null || props === void 0 ? void 0 : props.value)) return false;
+	const value = props.value;
+	return !!(value.match && typeof value.match.path === "string");
+}
+/**
+* Extract routes from React Router v5 by traversing fiber tree and finding Route context providers
+* This works even when component names are minified
+*/
+function extractRoutesFromFiberV5(fiber) {
+	const routes = [];
+	const visited = /* @__PURE__ */ new WeakSet();
+	const seenPaths = /* @__PURE__ */ new Set();
+	function traverse$1(node) {
+		if (!node || visited.has(node)) return;
+		visited.add(node);
+		const props = node.memoizedProps || node.pendingProps;
+		if (isRouteContextProvider(node)) {
+			const match = props.value.match;
+			const path = match.path || match.url || "/";
+			if (!seenPaths.has(path)) {
+				seenPaths.add(path);
+				const routeInfo = {
+					path,
+					params: match.params ? Object.keys(match.params) : void 0,
+					exact: match.isExact
+				};
+				if (node.child) {
+					const childName = getDisplayName(node.child);
+					if (childName && childName !== "Anonymous" && childName.length > 1) routeInfo.element = childName;
+				}
+				routes.push(routeInfo);
+			}
+		}
+		if (props === null || props === void 0 ? void 0 : props.children) {
+			const children = Array.isArray(props.children) ? props.children : [props.children];
+			let hasRouteChildren = false;
+			for (const child of children) if (child && child.props && isLikelyV5Route(child.props)) {
+				hasRouteChildren = true;
+				const route = extractRouteFromElementV5(child);
+				if (route && !seenPaths.has(route.path)) {
+					seenPaths.add(route.path);
+					routes.push(route);
+				}
+			}
+			if (hasRouteChildren) return;
+		}
+		if (node.child) traverse$1(node.child);
+		if (node.sibling) traverse$1(node.sibling);
+	}
+	traverse$1(fiber);
+	return routes;
+}
+/**
+* Extract route info from a React Router v5 Route element (JSX props)
+*/
+function extractRouteFromElementV5(element, parentPath = "") {
+	if (!element || !element.props) return null;
+	const props = element.props;
+	const path = props.path || "*";
+	let fullPath = path;
+	if (path !== "*" && !path.startsWith("/") && parentPath) fullPath = `${parentPath}/${path}`.replace(/\/+/g, "/");
+	const params = extractParamsFromPath(path);
+	const childRoutes = [];
+	if (props.children && typeof props.children !== "function") {
+		const children = Array.isArray(props.children) ? props.children : [props.children];
+		for (const child of children) if (child && child.type) {
+			var _child$type3;
+			const typeName = child.type.name || ((_child$type3 = child.type) === null || _child$type3 === void 0 ? void 0 : _child$type3.displayName);
+			const isRoute = typeName === "Route" || isLikelyV5Route(child.props);
+			const isSwitch = typeName === "Switch" || isLikelyV5Switch(child.props);
+			const isRedirect = typeName === "Redirect" || isLikelyV5Redirect(child.props);
+			if (isRoute && !isRedirect) {
+				const childRoute = extractRouteFromElementV5(child, fullPath);
+				if (childRoute) childRoutes.push(childRoute);
+			} else if (isSwitch) {
+				const switchChildren = extractRoutesFromSwitchProps(child.props, fullPath);
+				childRoutes.push(...switchChildren);
+			}
+		}
+	}
+	const hasChildren = childRoutes.length > 0;
+	const routeInfo = {
+		path: fullPath,
+		element: getV5ComponentName(props),
+		exact: props.exact === true,
+		strict: props.strict === true,
+		isLayout: hasChildren,
+		isLazy: isLazyElement(props.component),
+		params: params.length > 0 ? params : void 0
+	};
+	if (hasChildren) routeInfo.children = childRoutes;
+	return routeInfo;
+}
+/**
+* Extract routes from Switch component's children prop (React Router v5)
+*/
+function extractRoutesFromSwitchProps(props, parentPath = "") {
+	const routes = [];
+	if (!(props === null || props === void 0 ? void 0 : props.children)) return routes;
+	const children = Array.isArray(props.children) ? props.children : [props.children];
+	for (const child of children) if (child && child.type) {
+		const typeName = child.type.name || child.type.displayName;
+		const isRoute = typeName === "Route" || isLikelyV5Route(child.props);
+		const isRedirect = typeName === "Redirect" || isLikelyV5Redirect(child.props);
+		if (isRoute && !isRedirect) {
+			const route = extractRouteFromElementV5(child, parentPath);
+			if (route) routes.push(route);
+		} else if (isRedirect) {
+			var _child$props, _child$props2, _child$props3;
+			const to = (_child$props = child.props) === null || _child$props === void 0 ? void 0 : _child$props.to;
+			const toPath = typeof to === "string" ? to : (to === null || to === void 0 ? void 0 : to.pathname) || "unknown";
+			const redirectInfo = {
+				path: ((_child$props2 = child.props) === null || _child$props2 === void 0 ? void 0 : _child$props2.from) || "*",
+				element: `Redirect → ${toPath}`,
+				exact: ((_child$props3 = child.props) === null || _child$props3 === void 0 ? void 0 : _child$props3.exact) === true
+			};
+			routes.push(redirectInfo);
+		}
+	}
+	return routes;
+}
+/**
 * Extract route configuration from fiber tree
 */
 function extractRoutesFromFiber(fiber) {
@@ -1636,7 +1867,7 @@ function extractRoutesFromFiber(fiber) {
 	return routes;
 }
 /**
-* Find Routes component and extract route configuration
+* Find Routes/Switch component and extract route configuration
 */
 function findAndExtractRoutes(fiber) {
 	if (!fiber) return [];
@@ -1654,6 +1885,13 @@ function findAndExtractRoutes(fiber) {
 				return;
 			}
 		}
+		if (name === "Switch" || isLikelyV5Switch(props)) {
+			const switchRoutes = extractRoutesFromSwitchProps(props);
+			if (switchRoutes.length > 0) {
+				routes = switchRoutes;
+				return;
+			}
+		}
 		if (name === "DataRoutes" || name === "RoutesRenderer") {
 			const fiberRoutes = extractRoutesFromFiber(node);
 			if (fiberRoutes.length > 0) routes.push(...fiberRoutes);
@@ -1662,6 +1900,7 @@ function findAndExtractRoutes(fiber) {
 		if (node.sibling) traverse$1(node.sibling);
 	}
 	traverse$1(fiber);
+	if (routes.length === 0) routes = extractRoutesFromFiberV5(fiber);
 	return routes;
 }
 /**
@@ -1769,7 +2008,10 @@ function detectRouterType(fiber) {
 		if (!node || visited.has(node)) return null;
 		visited.add(node);
 		const name = getDisplayName(node);
-		if (name === "Router" || name === "BrowserRouter" || name === "HashRouter" || name === "MemoryRouter" || name === "Routes" || name === "Route") return "react-router";
+		const props = node.memoizedProps || node.pendingProps;
+		if (name === "Router" || name === "BrowserRouter" || name === "HashRouter" || name === "MemoryRouter" || name === "Routes" || name === "Switch" || name === "Route") return "react-router";
+		if (isLikelyV5Switch(props) || isLikelyV5Route(props)) return "react-router";
+		if (isRouterContextProvider(node) || isRouteContextProvider(node)) return "react-router";
 		if (node.child) {
 			const result = traverse$1(node.child);
 			if (result) return result;

package/dist/index.d.cts

@@ -148,6 +148,16 @@ declare global {
 }
 //#endregion
 //#region src/core/context/index.d.ts
+/**
+ * Warning about filtered properties in context values
+ */
+interface ContextWarning {
+  type: 'filtered_property';
+  /** The property name that was filtered */
+  property: string;
+  /** Human-readable message */
+  message: string;
+}
 /**
  * Information about a Context Provider
  */
@@ -171,6 +181,8 @@ interface ContextProviderInfo {
     lineNumber: number;
     columnNumber: number;
   };
+  /** Warnings about the context value (e.g., filtered properties) */
+  warnings?: ContextWarning[];
 }
 /**
  * Information about a Context Consumer
@@ -386,6 +398,10 @@ interface RouteInfo {
   hasErrorBoundary?: boolean;
   /** Dynamic segments in the path (e.g., :id, :userId) */
   params?: string[];
+  /** Whether this route requires exact match (React Router v5) */
+  exact?: boolean;
+  /** Whether this route uses strict matching (React Router v5) */
+  strict?: boolean;
 }
 interface MatchedRoute {
   path: string;
@@ -463,4 +479,4 @@ declare function createRpcServer<RemoteFunctions = Record<string, never>, LocalF
 //#region src/messaging/presets/iframe/context.d.ts
 declare function setIframeServerContext(iframe: HTMLIFrameElement | null): void;
 //#endregion
-export { ComponentDetails, ComponentTreeNode, ContextConsumerInfo, ContextProviderInfo, ContextTree, CreateRpcClientOptions, CreateRpcServerOptions, FiberNode, FiberRoot, HookInfo, HookStateInfo, MatchedRoute, NavigationEntry, PropValue, REACT_TAGS, ReactDevToolsHook, RenderedByInfo, RouteInfo, RouterState, SourceInfo, TIMELINE_LAYERS, type TimelineEvent, type TimelineLayer, type TimelineLayersState, ToggleInspectorOptions, TreeListener, addComponentEvent, addPerformanceEvent, buildTree, cleanupHighlight, clearFiberRegistry, clearNavigationHistory, clearOverrides, clearTimeline, createRpcClient, createRpcServer, getAllContexts, getAppFiberRoot, getComponentDetails, getComponentHookStates, getContextProviderInfo, getContextTree, getDisplayName, getFiberById, getFiberFromElement, getFiberId, getFiberRoot, getOverriddenContext, getOverriddenProp, getReactVersion, getRouterInfo, getRpcClient, getRpcServer, getTimelineState, hideHighlight, highlightNode, installReactHook, installTimelineEventListeners, isEditableProp, mergeClientRects, navigateTo, onInspectorSelect, onOpenInEditor, onTimelineEvent, onTreeUpdated, openInEditor, parseValue, rebuildTree, scrollToNode, setComponentProp, setContextValue, setContextValueAtPath, setContextValueFromJson, setFiberRoot, setHookState, setHookStateFromJson, setIframeServerContext, setRpcServerToGlobal, shouldIncludeFiber, showHighlight, toggleInspector, trackFiberPerformanceEnd, trackFiberPerformanceStart, updateTimelineState };
+export { ComponentDetails, ComponentTreeNode, ContextConsumerInfo, ContextProviderInfo, ContextTree, ContextWarning, CreateRpcClientOptions, CreateRpcServerOptions, FiberNode, FiberRoot, HookInfo, HookStateInfo, MatchedRoute, NavigationEntry, PropValue, REACT_TAGS, ReactDevToolsHook, RenderedByInfo, RouteInfo, RouterState, SourceInfo, TIMELINE_LAYERS, type TimelineEvent, type TimelineLayer, type TimelineLayersState, ToggleInspectorOptions, TreeListener, addComponentEvent, addPerformanceEvent, buildTree, cleanupHighlight, clearFiberRegistry, clearNavigationHistory, clearOverrides, clearTimeline, createRpcClient, createRpcServer, getAllContexts, getAppFiberRoot, getComponentDetails, getComponentHookStates, getContextProviderInfo, getContextTree, getDisplayName, getFiberById, getFiberFromElement, getFiberId, getFiberRoot, getOverriddenContext, getOverriddenProp, getReactVersion, getRouterInfo, getRpcClient, getRpcServer, getTimelineState, hideHighlight, highlightNode, installReactHook, installTimelineEventListeners, isEditableProp, mergeClientRects, navigateTo, onInspectorSelect, onOpenInEditor, onTimelineEvent, onTreeUpdated, openInEditor, parseValue, rebuildTree, scrollToNode, setComponentProp, setContextValue, setContextValueAtPath, setContextValueFromJson, setFiberRoot, setHookState, setHookStateFromJson, setIframeServerContext, setRpcServerToGlobal, shouldIncludeFiber, showHighlight, toggleInspector, trackFiberPerformanceEnd, trackFiberPerformanceStart, updateTimelineState };

package/dist/index.d.ts

@@ -148,6 +148,16 @@ declare global {
 }
 //#endregion
 //#region src/core/context/index.d.ts
+/**
+ * Warning about filtered properties in context values
+ */
+interface ContextWarning {
+  type: 'filtered_property';
+  /** The property name that was filtered */
+  property: string;
+  /** Human-readable message */
+  message: string;
+}
 /**
  * Information about a Context Provider
  */
@@ -171,6 +181,8 @@ interface ContextProviderInfo {
     lineNumber: number;
     columnNumber: number;
   };
+  /** Warnings about the context value (e.g., filtered properties) */
+  warnings?: ContextWarning[];
 }
 /**
  * Information about a Context Consumer
@@ -386,6 +398,10 @@ interface RouteInfo {
   hasErrorBoundary?: boolean;
   /** Dynamic segments in the path (e.g., :id, :userId) */
   params?: string[];
+  /** Whether this route requires exact match (React Router v5) */
+  exact?: boolean;
+  /** Whether this route uses strict matching (React Router v5) */
+  strict?: boolean;
 }
 interface MatchedRoute {
   path: string;
@@ -463,4 +479,4 @@ declare function createRpcServer<RemoteFunctions = Record<string, never>, LocalF
 //#region src/messaging/presets/iframe/context.d.ts
 declare function setIframeServerContext(iframe: HTMLIFrameElement | null): void;
 //#endregion
-export { ComponentDetails, ComponentTreeNode, ContextConsumerInfo, ContextProviderInfo, ContextTree, CreateRpcClientOptions, CreateRpcServerOptions, FiberNode, FiberRoot, HookInfo, HookStateInfo, MatchedRoute, NavigationEntry, PropValue, REACT_TAGS, ReactDevToolsHook, RenderedByInfo, RouteInfo, RouterState, SourceInfo, TIMELINE_LAYERS, type TimelineEvent, type TimelineLayer, type TimelineLayersState, ToggleInspectorOptions, TreeListener, addComponentEvent, addPerformanceEvent, buildTree, cleanupHighlight, clearFiberRegistry, clearNavigationHistory, clearOverrides, clearTimeline, createRpcClient, createRpcServer, getAllContexts, getAppFiberRoot, getComponentDetails, getComponentHookStates, getContextProviderInfo, getContextTree, getDisplayName, getFiberById, getFiberFromElement, getFiberId, getFiberRoot, getOverriddenContext, getOverriddenProp, getReactVersion, getRouterInfo, getRpcClient, getRpcServer, getTimelineState, hideHighlight, highlightNode, installReactHook, installTimelineEventListeners, isEditableProp, mergeClientRects, navigateTo, onInspectorSelect, onOpenInEditor, onTimelineEvent, onTreeUpdated, openInEditor, parseValue, rebuildTree, scrollToNode, setComponentProp, setContextValue, setContextValueAtPath, setContextValueFromJson, setFiberRoot, setHookState, setHookStateFromJson, setIframeServerContext, setRpcServerToGlobal, shouldIncludeFiber, showHighlight, toggleInspector, trackFiberPerformanceEnd, trackFiberPerformanceStart, updateTimelineState };
+export { ComponentDetails, ComponentTreeNode, ContextConsumerInfo, ContextProviderInfo, ContextTree, ContextWarning, CreateRpcClientOptions, CreateRpcServerOptions, FiberNode, FiberRoot, HookInfo, HookStateInfo, MatchedRoute, NavigationEntry, PropValue, REACT_TAGS, ReactDevToolsHook, RenderedByInfo, RouteInfo, RouterState, SourceInfo, TIMELINE_LAYERS, type TimelineEvent, type TimelineLayer, type TimelineLayersState, ToggleInspectorOptions, TreeListener, addComponentEvent, addPerformanceEvent, buildTree, cleanupHighlight, clearFiberRegistry, clearNavigationHistory, clearOverrides, clearTimeline, createRpcClient, createRpcServer, getAllContexts, getAppFiberRoot, getComponentDetails, getComponentHookStates, getContextProviderInfo, getContextTree, getDisplayName, getFiberById, getFiberFromElement, getFiberId, getFiberRoot, getOverriddenContext, getOverriddenProp, getReactVersion, getRouterInfo, getRpcClient, getRpcServer, getTimelineState, hideHighlight, highlightNode, installReactHook, installTimelineEventListeners, isEditableProp, mergeClientRects, navigateTo, onInspectorSelect, onOpenInEditor, onTimelineEvent, onTreeUpdated, openInEditor, parseValue, rebuildTree, scrollToNode, setComponentProp, setContextValue, setContextValueAtPath, setContextValueFromJson, setFiberRoot, setHookState, setHookStateFromJson, setIframeServerContext, setRpcServerToGlobal, shouldIncludeFiber, showHighlight, toggleInspector, trackFiberPerformanceEnd, trackFiberPerformanceStart, updateTimelineState };

package/dist/index.js

@@ -81,9 +81,28 @@ function getFiberFromElement(element) {
 //#endregion
 //#region src/core/context/index.ts
 /**
+* Properties that can cause prototype pollution and should be filtered out
+* SuperJSON will throw an error if these properties are present in the object
+*/
+const DANGEROUS_PROPERTIES$1 = new Set([
+	"constructor",
+	"__proto__",
+	"prototype"
+]);
+/**
+* Check if a property key is safe to serialize (not a prototype pollution risk)
+*/
+function isSafePropertyKey$1(key) {
+	return !DANGEROUS_PROPERTIES$1.has(key);
+}
+/**
 * Serialize a value into a displayable PropValue
+* @param value - The value to serialize
+* @param depth - Current recursion depth
+* @param maxDepth - Maximum recursion depth
+* @param context - Optional context to collect warnings about filtered properties
 */
-function serializeValue$1(value, depth = 0, maxDepth = 6) {
+function serializeValue$1(value, depth = 0, maxDepth = 6, context) {
 	if (value === null) return {
 		type: "null",
 		value: "null"
@@ -126,7 +145,7 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 	if (Array.isArray(value)) {
 		const children = {};
 		value.forEach((item, index) => {
-			children[String(index)] = serializeValue$1(item, depth + 1, maxDepth);
+			children[String(index)] = serializeValue$1(item, depth + 1, maxDepth, context);
 		});
 		return {
 			type: "array",
@@ -142,10 +161,13 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 				value: `<${((_value$type = value.type) === null || _value$type === void 0 ? void 0 : _value$type.displayName) || ((_value$type2 = value.type) === null || _value$type2 === void 0 ? void 0 : _value$type2.name) || value.type || "Unknown"} />`
 			};
 		}
-		const keys = Object.keys(value);
+		const allKeys = Object.keys(value);
+		const safeKeys = allKeys.filter(isSafePropertyKey$1);
+		const filteredKeys = allKeys.filter((key) => !isSafePropertyKey$1(key));
+		if (context && filteredKeys.length > 0) filteredKeys.forEach((key) => context.filteredProperties.add(key));
 		const children = {};
-		for (const key of keys) try {
-			children[key] = serializeValue$1(value[key], depth + 1, maxDepth);
+		for (const key of safeKeys) try {
+			children[key] = serializeValue$1(value[key], depth + 1, maxDepth, context);
 		} catch (_unused) {
 			children[key] = {
 				type: "unknown",
@@ -155,7 +177,7 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 		return {
 			type: "object",
 			value: `Object`,
-			preview: keys.length > 0 ? `{${keys.slice(0, 3).join(", ")}${keys.length > 3 ? ", ..." : ""}}` : "{}",
+			preview: safeKeys.length > 0 ? `{${safeKeys.slice(0, 3).join(", ")}${safeKeys.length > 3 ? ", ..." : ""}}` : "{}",
 			children: Object.keys(children).length > 0 ? children : void 0
 		};
 	}
@@ -165,6 +187,23 @@ function serializeValue$1(value, depth = 0, maxDepth = 6) {
 	};
 }
 /**
+* Serialize a context value and collect any warnings
+*/
+function serializeContextValue(value) {
+	const context = { filteredProperties: /* @__PURE__ */ new Set() };
+	const propValue = serializeValue$1(value, 0, 6, context);
+	const warnings = [];
+	for (const property of context.filteredProperties) warnings.push({
+		type: "filtered_property",
+		property,
+		message: `Property "${property}" was hidden to prevent prototype pollution errors. This does not affect your application.`
+	});
+	return {
+		propValue,
+		warnings
+	};
+}
+/**
 * Get the display name of a Context
 */
 function getContextDisplayName(fiber) {
@@ -240,10 +279,11 @@ function buildProviderInfo(fiber, visited) {
 	const consumers = [];
 	if (fiber.child) findConsumers(fiber.child, contextType, consumers, /* @__PURE__ */ new WeakSet());
 	const uniqueConsumers = consumers.filter((consumer, index, self) => index === self.findIndex((c) => c.id === consumer.id));
+	const { propValue, warnings } = serializeContextValue(getContextValue(fiber));
 	const info = {
 		id: getFiberId(fiber),
 		name: getContextDisplayName(fiber),
-		value: serializeValue$1(getContextValue(fiber)),
+		value: propValue,
 		fiberId: getFiberId(fiber),
 		consumerCount: uniqueConsumers.length,
 		consumers: uniqueConsumers,
@@ -252,7 +292,8 @@ function buildProviderInfo(fiber, visited) {
 			fileName: fiber._debugSource.fileName,
 			lineNumber: fiber._debugSource.lineNumber,
 			columnNumber: fiber._debugSource.columnNumber
-		} : void 0
+		} : void 0,
+		warnings: warnings.length > 0 ? warnings : void 0
 	};
 	const findNestedProviders = (child) => {
 		var _child$type;
@@ -337,6 +378,21 @@ function getAllContexts(root) {
 //#endregion
 //#region src/core/fiber/details.ts
 /**
+* Properties that can cause prototype pollution and should be filtered out
+* SuperJSON throws: "Detected property constructor. This is a property pollution risk"
+*/
+const DANGEROUS_PROPERTIES = new Set([
+	"constructor",
+	"__proto__",
+	"prototype"
+]);
+/**
+* Check if a property key is safe to serialize (not a prototype pollution risk)
+*/
+function isSafePropertyKey(key) {
+	return !DANGEROUS_PROPERTIES.has(key);
+}
+/**
 * Serialize a value into a displayable PropValue
 */
 function serializeValue(value, depth = 0, maxDepth = 8) {
@@ -398,7 +454,7 @@ function serializeValue(value, depth = 0, maxDepth = 8) {
 				value: `<${((_value$type = value.type) === null || _value$type === void 0 ? void 0 : _value$type.displayName) || ((_value$type2 = value.type) === null || _value$type2 === void 0 ? void 0 : _value$type2.name) || value.type || "Unknown"} />`
 			};
 		}
-		const keys = Object.keys(value);
+		const keys = Object.keys(value).filter(isSafePropertyKey);
 		const children = {};
 		for (const key of keys) try {
 			children[key] = serializeValue(value[key], depth + 1, maxDepth);
@@ -1562,7 +1618,7 @@ function extractRouteFromElement(element, parentPath = "") {
 	return routeInfo;
 }
 /**
-* Extract routes from Routes component's children prop
+* Extract routes from Routes component's children prop (React Router v6)
 */
 function extractRoutesFromProps(props) {
 	const routes = [];
@@ -1578,6 +1634,181 @@ function extractRoutesFromProps(props) {
 	return routes;
 }
 /**
+* Get component name from React Router v5 Route props
+*/
+function getV5ComponentName(props) {
+	if (props.component) return props.component.name || props.component.displayName;
+	if (props.render) return "render()";
+	if (typeof props.children === "function") return "children()";
+}
+/**
+* Check if a component is likely a React Router v5 Route by its props
+*/
+function isLikelyV5Route(props) {
+	if (!props) return false;
+	const hasPath = typeof props.path === "string" || props.path === void 0;
+	const hasRouteProps = props.component || props.render || props.children !== void 0;
+	const hasExactOrStrict = props.exact !== void 0 || props.strict !== void 0;
+	const hasLocation = props.location !== void 0;
+	const hasComputedMatch = props.computedMatch !== void 0;
+	return hasPath && hasRouteProps || hasExactOrStrict || hasComputedMatch || hasLocation;
+}
+/**
+* Check if a component is likely a React Router v5 Switch by its props/children
+*/
+function isLikelyV5Switch(props) {
+	if (!props || !props.children) return false;
+	const children = Array.isArray(props.children) ? props.children : [props.children];
+	for (const child of children) if (child && child.props) {
+		if (isLikelyV5Route(child.props)) return true;
+	}
+	return false;
+}
+/**
+* Check if a component is likely a React Router v5 Redirect by its props
+*/
+function isLikelyV5Redirect(props) {
+	if (!props) return false;
+	return typeof props.to === "string" || typeof props.to === "object" && props.to !== null;
+}
+/**
+* Check if a fiber node is a React Router v5 context provider
+* React Router v5 uses __RouterContext with value containing { history, location, match, staticContext }
+*/
+function isRouterContextProvider(fiber) {
+	const props = fiber.memoizedProps || fiber.pendingProps;
+	if (!(props === null || props === void 0 ? void 0 : props.value)) return false;
+	const value = props.value;
+	return !!(value.history && value.location && typeof value.match === "object");
+}
+/**
+* Check if a fiber node is a React Router v5 Route context provider
+* Route wraps children in a context provider with match info
+*/
+function isRouteContextProvider(fiber) {
+	const props = fiber.memoizedProps || fiber.pendingProps;
+	if (!(props === null || props === void 0 ? void 0 : props.value)) return false;
+	const value = props.value;
+	return !!(value.match && typeof value.match.path === "string");
+}
+/**
+* Extract routes from React Router v5 by traversing fiber tree and finding Route context providers
+* This works even when component names are minified
+*/
+function extractRoutesFromFiberV5(fiber) {
+	const routes = [];
+	const visited = /* @__PURE__ */ new WeakSet();
+	const seenPaths = /* @__PURE__ */ new Set();
+	function traverse$1(node) {
+		if (!node || visited.has(node)) return;
+		visited.add(node);
+		const props = node.memoizedProps || node.pendingProps;
+		if (isRouteContextProvider(node)) {
+			const match = props.value.match;
+			const path = match.path || match.url || "/";
+			if (!seenPaths.has(path)) {
+				seenPaths.add(path);
+				const routeInfo = {
+					path,
+					params: match.params ? Object.keys(match.params) : void 0,
+					exact: match.isExact
+				};
+				if (node.child) {
+					const childName = getDisplayName(node.child);
+					if (childName && childName !== "Anonymous" && childName.length > 1) routeInfo.element = childName;
+				}
+				routes.push(routeInfo);
+			}
+		}
+		if (props === null || props === void 0 ? void 0 : props.children) {
+			const children = Array.isArray(props.children) ? props.children : [props.children];
+			let hasRouteChildren = false;
+			for (const child of children) if (child && child.props && isLikelyV5Route(child.props)) {
+				hasRouteChildren = true;
+				const route = extractRouteFromElementV5(child);
+				if (route && !seenPaths.has(route.path)) {
+					seenPaths.add(route.path);
+					routes.push(route);
+				}
+			}
+			if (hasRouteChildren) return;
+		}
+		if (node.child) traverse$1(node.child);
+		if (node.sibling) traverse$1(node.sibling);
+	}
+	traverse$1(fiber);
+	return routes;
+}
+/**
+* Extract route info from a React Router v5 Route element (JSX props)
+*/
+function extractRouteFromElementV5(element, parentPath = "") {
+	if (!element || !element.props) return null;
+	const props = element.props;
+	const path = props.path || "*";
+	let fullPath = path;
+	if (path !== "*" && !path.startsWith("/") && parentPath) fullPath = `${parentPath}/${path}`.replace(/\/+/g, "/");
+	const params = extractParamsFromPath(path);
+	const childRoutes = [];
+	if (props.children && typeof props.children !== "function") {
+		const children = Array.isArray(props.children) ? props.children : [props.children];
+		for (const child of children) if (child && child.type) {
+			var _child$type3;
+			const typeName = child.type.name || ((_child$type3 = child.type) === null || _child$type3 === void 0 ? void 0 : _child$type3.displayName);
+			const isRoute = typeName === "Route" || isLikelyV5Route(child.props);
+			const isSwitch = typeName === "Switch" || isLikelyV5Switch(child.props);
+			const isRedirect = typeName === "Redirect" || isLikelyV5Redirect(child.props);
+			if (isRoute && !isRedirect) {
+				const childRoute = extractRouteFromElementV5(child, fullPath);
+				if (childRoute) childRoutes.push(childRoute);
+			} else if (isSwitch) {
+				const switchChildren = extractRoutesFromSwitchProps(child.props, fullPath);
+				childRoutes.push(...switchChildren);
+			}
+		}
+	}
+	const hasChildren = childRoutes.length > 0;
+	const routeInfo = {
+		path: fullPath,
+		element: getV5ComponentName(props),
+		exact: props.exact === true,
+		strict: props.strict === true,
+		isLayout: hasChildren,
+		isLazy: isLazyElement(props.component),
+		params: params.length > 0 ? params : void 0
+	};
+	if (hasChildren) routeInfo.children = childRoutes;
+	return routeInfo;
+}
+/**
+* Extract routes from Switch component's children prop (React Router v5)
+*/
+function extractRoutesFromSwitchProps(props, parentPath = "") {
+	const routes = [];
+	if (!(props === null || props === void 0 ? void 0 : props.children)) return routes;
+	const children = Array.isArray(props.children) ? props.children : [props.children];
+	for (const child of children) if (child && child.type) {
+		const typeName = child.type.name || child.type.displayName;
+		const isRoute = typeName === "Route" || isLikelyV5Route(child.props);
+		const isRedirect = typeName === "Redirect" || isLikelyV5Redirect(child.props);
+		if (isRoute && !isRedirect) {
+			const route = extractRouteFromElementV5(child, parentPath);
+			if (route) routes.push(route);
+		} else if (isRedirect) {
+			var _child$props, _child$props2, _child$props3;
+			const to = (_child$props = child.props) === null || _child$props === void 0 ? void 0 : _child$props.to;
+			const toPath = typeof to === "string" ? to : (to === null || to === void 0 ? void 0 : to.pathname) || "unknown";
+			const redirectInfo = {
+				path: ((_child$props2 = child.props) === null || _child$props2 === void 0 ? void 0 : _child$props2.from) || "*",
+				element: `Redirect → ${toPath}`,
+				exact: ((_child$props3 = child.props) === null || _child$props3 === void 0 ? void 0 : _child$props3.exact) === true
+			};
+			routes.push(redirectInfo);
+		}
+	}
+	return routes;
+}
+/**
 * Extract route configuration from fiber tree
 */
 function extractRoutesFromFiber(fiber) {
@@ -1612,7 +1843,7 @@ function extractRoutesFromFiber(fiber) {
 	return routes;
 }
 /**
-* Find Routes component and extract route configuration
+* Find Routes/Switch component and extract route configuration
 */
 function findAndExtractRoutes(fiber) {
 	if (!fiber) return [];
@@ -1630,6 +1861,13 @@ function findAndExtractRoutes(fiber) {
 				return;
 			}
 		}
+		if (name === "Switch" || isLikelyV5Switch(props)) {
+			const switchRoutes = extractRoutesFromSwitchProps(props);
+			if (switchRoutes.length > 0) {
+				routes = switchRoutes;
+				return;
+			}
+		}
 		if (name === "DataRoutes" || name === "RoutesRenderer") {
 			const fiberRoutes = extractRoutesFromFiber(node);
 			if (fiberRoutes.length > 0) routes.push(...fiberRoutes);
@@ -1638,6 +1876,7 @@ function findAndExtractRoutes(fiber) {
 		if (node.sibling) traverse$1(node.sibling);
 	}
 	traverse$1(fiber);
+	if (routes.length === 0) routes = extractRoutesFromFiberV5(fiber);
 	return routes;
 }
 /**
@@ -1745,7 +1984,10 @@ function detectRouterType(fiber) {
 		if (!node || visited.has(node)) return null;
 		visited.add(node);
 		const name = getDisplayName(node);
-		if (name === "Router" || name === "BrowserRouter" || name === "HashRouter" || name === "MemoryRouter" || name === "Routes" || name === "Route") return "react-router";
+		const props = node.memoizedProps || node.pendingProps;
+		if (name === "Router" || name === "BrowserRouter" || name === "HashRouter" || name === "MemoryRouter" || name === "Routes" || name === "Switch" || name === "Route") return "react-router";
+		if (isLikelyV5Switch(props) || isLikelyV5Route(props)) return "react-router";
+		if (isRouterContextProvider(node) || isRouteContextProvider(node)) return "react-router";
 		if (node.child) {
 			const result = traverse$1(node.child);
 			if (result) return result;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@react-devtools-plus/kit",
   "type": "module",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "author": "wzc520pyfm",
   "license": "MIT",
   "repository": {
@@ -27,7 +27,7 @@
     "mitt": "^3.0.1",
     "perfect-debounce": "^2.0.0",
     "superjson": "^2.2.2",
-    "@react-devtools-plus/shared": "^0.9.4"
+    "@react-devtools-plus/shared": "^0.9.6"
   },
   "devDependencies": {
     "@types/node": "^24.7.2",