axios 0.30.2 → 0.30.3

package/dist/axios.js

@@ -1,4 +1,4 @@
-// axios v0.30.2 Copyright (c) 2025 Matt Zabriskie
+// axios v0.30.3 Copyright (c) 2026 Matt Zabriskie
 (function (global, factory) {
   typeof exports === 'object' && typeof module !== 'undefined' ? module.exports = factory() :
   typeof define === 'function' && define.amd ? define(factory) :
@@ -319,6 +319,10 @@
   function merge(/* obj1, obj2, obj3, ... */) {
     var result = {};
     function assignValue(val, key) {
+      if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+        return;
+      }
+
       if (isPlainObject(result[key]) && isPlainObject(val)) {
         result[key] = merge(result[key], val);
       } else if (isPlainObject(val)) {
@@ -1904,7 +1908,10 @@
     };
 
     utils.forEach(Object.keys(config1).concat(Object.keys(config2)), function computeConfigValue(prop) {
-      var merge = mergeMap[prop] || mergeDeepProperties;
+      if (prop === '__proto__' || prop === 'constructor' || prop === 'prototype') {
+        return;
+      }
+      var merge = utils.hasOwnProperty(mergeMap, prop) ? mergeMap[prop] : mergeDeepProperties;
       var configValue = merge(prop);
       (utils.isUndefined(configValue) && merge !== mergeDirectKeys) || (config[prop] = configValue);
     });
@@ -1913,7 +1920,7 @@
   };
 
   var data = {
-    "version": "0.30.2"
+    version: "0.30.3",
   };
 
   var VERSION = data.version;