alasql 2.4.2 → 2.4.3

package/dist/es5/alasql.fs.js

@@ -1,7 +1,7 @@
-//! AlaSQL v2.3.0-develop-5afe194a | © 2014-2022 Andrey Gershun & Mathias Wulff | License: MIT
+//! AlaSQL v2.4.3 | © 2014-2022 Andrey Gershun & Mathias Wulff | License: MIT
 /*
 @module alasql
-@version 2.3.0
+@version 2.4.3
 
 AlaSQL - JavaScript SQL database
 © 2014-2023	Andrey Gershun & Mathias Wulff
@@ -878,7 +878,7 @@ var __generator = this && this.__generator || function(thisArg, body) {
                 });
             } else {
                 // if column not exist, then copy all
-                sp += 'var w=p["' + alias + '"];for(var k in w){r[k]=w[k]};';
+                sp += 'var w=p["' + alias + '"];for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
                 query.dirtyColumns = true;
             }
         //	}
@@ -1934,7 +1934,7 @@ var __generator = this && this.__generator || function(thisArg, body) {
     /** 
 	Current version of alasql 
  	@constant {string} 
-*/ alasql.version = "2.3.0";
+*/ alasql.version = "2.4.3";
     /**
 	Debug flag
 	@type {boolean}
@@ -48636,10 +48636,10 @@ var __dirname = '';
         if (_instanceof(obj, Number)) {
             return +obj;
         }
-        var temp = new obj.constructor(); // changed
+        var temp = new (Object.prototype.hasOwnProperty.call(obj, 'constructor') ? Object : obj.constructor)(); // changed
         for(var key in obj){
             if (obj.hasOwnProperty(key)) {
-                temp[key] = cloneDeep(obj[key]);
+                /* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(temp, key, {value: cloneDeep(obj[key]), writable: true, enumerable: true, configurable: true}); } else { temp[key] = cloneDeep(obj[key]); }
             }
         }
         return temp;
@@ -48699,7 +48699,7 @@ var __dirname = '';
         a = a || {};
         for(var key in b){
             if (b.hasOwnProperty(key)) {
-                a[key] = b[key];
+                /* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(a, key, {value: b[key], writable: true, enumerable: true, configurable: true}); } else { a[key] = b[key]; }
             }
         }
         return a;
@@ -51562,7 +51562,7 @@ var __dirname = '';
             }).join("");
             var aft = "", aft2 = "";
             if (typeof query.groupStar !== "undefined") {
-                aft2 += "for(var f in p['" + query.groupStar + "']) {g[f]=p['" + query.groupStar + "'][f];};";
+                aft2 += "for(var f in p['" + query.groupStar + "']) {if(/^__proto__$/.test(f))Object.defineProperty(g,f,{writable:true,enumerable:true,configurable:true});g[f]=p['" + query.groupStar + "'][f];};";
             }
             /*
 		 */ //		s += self.columns.map(function(col){
@@ -51918,9 +51918,9 @@ var __dirname = '';
         var s = "var r = {};";
         _$self.columns.forEach(function(col) {
             if (_instanceof(col, yy.Column) && col.columnid === "*") {
-                //			s += 'for(var k in g){r[k]=g[k]};';
+                //			s += 'for(var k in g){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};';
                 //			s += 'for(var k in this.query.groupColumns){r[k]=g[this.query.groupColumns[k]]};';
-                s += "for(var k in g) {r[k]=g[k]};";
+                s += "for(var k in g) {if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};";
                 return "";
             } else {
                 // var colas = col.as;
@@ -54734,7 +54734,7 @@ if(false) {
             if (toreplace) {
                 // Do UPDATE!!!
                 table.update(function(t) {
-                    for(var f in r)t[f] = r[f];
+                    for(var f in r){if(/^__proto__$/.test(f))Object.defineProperty(t,f,{writable:true,enumerable:true,configurable:true});t[f] = r[f];}
                 }, table.data.indexOf(toreplace), params);
             } else {
                 table.data.push(r);
@@ -56049,7 +56049,7 @@ if(false) {
                             ss.push(q);
                         });
                     } else {
-                        //					sw = 'var w='+JSONtoJS(values)+';for(var k in w){r[k]=w[k]};';
+                        //					sw = 'var w='+JSONtoJS(values)+';for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
                         sw = JSONtoJS(values);
                     }
                 }

package/dist/es5/alasql.js

@@ -1,7 +1,7 @@
-//! AlaSQL v2.3.0-develop-5afe194a | © 2014-2022 Andrey Gershun & Mathias Wulff | License: MIT
+//! AlaSQL v2.4.3 | © 2014-2022 Andrey Gershun & Mathias Wulff | License: MIT
 /*
 @module alasql
-@version 2.3.0
+@version 2.4.3
 
 AlaSQL - JavaScript SQL database
 © 2014-2023	Andrey Gershun & Mathias Wulff
@@ -878,7 +878,7 @@ var __generator = this && this.__generator || function(thisArg, body) {
                 });
             } else {
                 // if column not exist, then copy all
-                sp += 'var w=p["' + alias + '"];for(var k in w){r[k]=w[k]};';
+                sp += 'var w=p["' + alias + '"];for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
                 query.dirtyColumns = true;
             }
         //	}
@@ -1934,7 +1934,7 @@ var __generator = this && this.__generator || function(thisArg, body) {
     /** 
 	Current version of alasql 
  	@constant {string} 
-*/ alasql.version = "2.3.0";
+*/ alasql.version = "2.4.3";
     /**
 	Debug flag
 	@type {boolean}
@@ -48648,10 +48648,10 @@ _fetch = typeof fetch !== 'undefined' ? fetch : require('cross-fetch');
         if (_instanceof(obj, Number)) {
             return +obj;
         }
-        var temp = new obj.constructor(); // changed
+        var temp = new (Object.prototype.hasOwnProperty.call(obj, 'constructor') ? Object : obj.constructor)(); // changed
         for(var key in obj){
             if (obj.hasOwnProperty(key)) {
-                temp[key] = cloneDeep(obj[key]);
+                /* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(temp, key, {value: cloneDeep(obj[key]), writable: true, enumerable: true, configurable: true}); } else { temp[key] = cloneDeep(obj[key]); }
             }
         }
         return temp;
@@ -48711,7 +48711,7 @@ _fetch = typeof fetch !== 'undefined' ? fetch : require('cross-fetch');
         a = a || {};
         for(var key in b){
             if (b.hasOwnProperty(key)) {
-                a[key] = b[key];
+                /* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(a, key, {value: b[key], writable: true, enumerable: true, configurable: true}); } else { a[key] = b[key]; }
             }
         }
         return a;
@@ -51573,7 +51573,7 @@ _fetch = typeof fetch !== 'undefined' ? fetch : require('cross-fetch');
             }).join("");
             var aft = "", aft2 = "";
             if (typeof query.groupStar !== "undefined") {
-                aft2 += "for(var f in p['" + query.groupStar + "']) {g[f]=p['" + query.groupStar + "'][f];};";
+                aft2 += "for(var f in p['" + query.groupStar + "']) {if(/^__proto__$/.test(f))Object.defineProperty(g,f,{writable:true,enumerable:true,configurable:true});g[f]=p['" + query.groupStar + "'][f];};";
             }
             /*
 		 */ //		s += self.columns.map(function(col){
@@ -51929,9 +51929,9 @@ _fetch = typeof fetch !== 'undefined' ? fetch : require('cross-fetch');
         var s = "var r = {};";
         _$self.columns.forEach(function(col) {
             if (_instanceof(col, yy.Column) && col.columnid === "*") {
-                //			s += 'for(var k in g){r[k]=g[k]};';
+                //			s += 'for(var k in g){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};';
                 //			s += 'for(var k in this.query.groupColumns){r[k]=g[this.query.groupColumns[k]]};';
-                s += "for(var k in g) {r[k]=g[k]};";
+                s += "for(var k in g) {if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};";
                 return "";
             } else {
                 // var colas = col.as;
@@ -54745,7 +54745,7 @@ if(false) {
             if (toreplace) {
                 // Do UPDATE!!!
                 table.update(function(t) {
-                    for(var f in r)t[f] = r[f];
+                    for(var f in r){if(/^__proto__$/.test(f))Object.defineProperty(t,f,{writable:true,enumerable:true,configurable:true});t[f] = r[f];}
                 }, table.data.indexOf(toreplace), params);
             } else {
                 table.data.push(r);
@@ -56060,7 +56060,7 @@ if(false) {
                             ss.push(q);
                         });
                     } else {
-                        //					sw = 'var w='+JSONtoJS(values)+';for(var k in w){r[k]=w[k]};';
+                        //					sw = 'var w='+JSONtoJS(values)+';for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
                         sw = JSONtoJS(values);
                     }
                 }