@tmlmobilidade/utils 20260509.331.19 → 20260509.340.15

package/dist/generic/value-at-path.d.ts

@@ -21,12 +21,4 @@ export type PathValue<T, P extends string> = P extends `${infer Key}.${infer Res
  * @returns The value at the given path or undefined if the path is invalid.
  */
 export declare function getValueAtPath<T, P extends DotPath<T>>(obj: T, path: P): PathValue<T, P>;
-/**
- * Sets a value at a specified dot-separated path within an object.
- * If intermediate objects or arrays do not exist, they are created.
- * @param obj The object to set the value in.
- * @param path The dot-separated path where the value should be set.
- * @param value The value to set at the specified path.
- * @returns The updated object with the value set at the specified path.
- */
 export declare function setValueAtPath<T extends object, P extends DotPath<T>>(obj: T, path: P, value: PathValue<T, P>): T;

package/dist/generic/value-at-path.js

@@ -19,8 +19,14 @@ export function getValueAtPath(obj, path) {
  * @param value The value to set at the specified path.
  * @returns The updated object with the value set at the specified path.
  */
+const UNSAFE_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
 export function setValueAtPath(obj, path, value) {
     const keys = path.split('.');
+    for (const key of keys) {
+        if (UNSAFE_KEYS.has(key)) {
+            throw new Error(`Unsafe path segment: "${key}"`);
+        }
+    }
     let current = obj;
     keys.slice(0, -1).forEach((key) => {
         if (!(key in current)) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@tmlmobilidade/utils",
-	"version": "20260509.331.19",
+	"version": "20260509.340.15",
 	"author": {
 		"email": "iso@tmlmobilidade.pt",
 		"name": "TML-ISO"