browserslist 4.28.1 → 4.28.2

package/LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright 2014 Andrey Sitnik <andrey@sitnik.ru> and other contributors
+Copyright 2014 Andrey Sitnik <andrey@sitnik.es> and other contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in

package/README.md

@@ -6,13 +6,13 @@
 The config to share target browsers and Node.js versions between different
 front-end tools. It is used in:
 
-* [Autoprefixer]
-* [Babel]
-* [postcss-preset-env]
-* [eslint-plugin-compat]
-* [stylelint-no-unsupported-browser-features]
-* [postcss-normalize]
-* [obsolete-webpack-plugin]
+- [Autoprefixer]
+- [Babel]
+- [postcss-preset-env]
+- [eslint-plugin-compat]
+- [stylelint-no-unsupported-browser-features]
+- [postcss-normalize]
+- [obsolete-webpack-plugin]
 
 All tools will find target browsers automatically,
 when you add the following to `package.json`:
@@ -50,16 +50,15 @@ You can check how config works at our playground: [`browsersl.ist`](https://brow
 </div>
 
 [stylelint-no-unsupported-browser-features]: https://github.com/ismay/stylelint-no-unsupported-browser-features
-[obsolete-webpack-plugin]:                   https://github.com/ElemeFE/obsolete-webpack-plugin
-[eslint-plugin-compat]:                      https://github.com/amilajack/eslint-plugin-compat
-[Browserslist Example]:                      https://github.com/browserslist/browserslist-example
-[postcss-preset-env]:                        https://github.com/csstools/postcss-plugins/tree/main/plugin-packs/postcss-preset-env
-[postcss-normalize]:                         https://github.com/csstools/postcss-normalize
-[`browsersl.ist`]:                           https://browsersl.ist/
-[`caniuse-lite`]:                            https://github.com/ben-eb/caniuse-lite
-[Autoprefixer]:                              https://github.com/postcss/autoprefixer
-[Can I Use]:                                 https://caniuse.com/
-[Babel]:                                     https://github.com/babel/babel/tree/master/packages/babel-preset-env
+[obsolete-webpack-plugin]: https://github.com/ElemeFE/obsolete-webpack-plugin
+[eslint-plugin-compat]: https://github.com/amilajack/eslint-plugin-compat
+[postcss-preset-env]: https://github.com/csstools/postcss-plugins/tree/main/plugin-packs/postcss-preset-env
+[postcss-normalize]: https://github.com/csstools/postcss-normalize
+[`browsersl.ist`]: https://browsersl.ist/
+[`caniuse-lite`]: https://github.com/ben-eb/caniuse-lite
+[Autoprefixer]: https://github.com/postcss/autoprefixer
+[Can I Use]: https://caniuse.com/
+[Babel]: https://github.com/babel/babel/tree/master/packages/babel-preset-env
 
 ## Docs
 Read full docs **[here](https://github.com/browserslist/browserslist#readme)**.

package/index.js

@@ -255,10 +255,14 @@ function normalizeAndroidVersions(androidVersions, chromeVersions) {
     .concat(chromeVersions.slice(iFirstEvergreen))
 }
 
+var DANGEROUS_KEYS = ['__proto__', 'constructor', 'prototype']
+
 function copyObject(obj) {
   var copy = {}
   for (var key in obj) {
-    copy[key] = obj[key]
+    if (DANGEROUS_KEYS.indexOf(key) === -1) {
+      copy[key] = obj[key]
+    }
   }
   return copy
 }

package/package.json

@@ -1,12 +1,15 @@
 {
   "name": "browserslist",
-  "version": "4.28.1",
+  "version": "4.28.2",
   "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
   "keywords": [
-    "caniuse",
     "browsers",
+    "caniuse",
     "target"
   ],
+  "license": "MIT",
+  "author": "Andrey Sitnik <andrey@sitnik.es>",
+  "repository": "browserslist/browserslist",
   "funding": [
     {
       "type": "opencollective",
@@ -21,25 +24,22 @@
       "url": "https://github.com/sponsors/ai"
     }
   ],
-  "author": "Andrey Sitnik <andrey@sitnik.ru>",
-  "license": "MIT",
-  "repository": "browserslist/browserslist",
-  "dependencies": {
-    "baseline-browser-mapping": "^2.9.0",
-    "caniuse-lite": "^1.0.30001759",
-    "electron-to-chromium": "^1.5.263",
-    "node-releases": "^2.0.27",
-    "update-browserslist-db": "^1.2.0"
-  },
-  "engines": {
-    "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
-  },
   "bin": {
     "browserslist": "cli.js"
   },
-  "types": "./index.d.ts",
   "browser": {
     "./node.js": "./browser.js",
     "path": false
+  },
+  "types": "./index.d.ts",
+  "dependencies": {
+    "baseline-browser-mapping": "^2.10.12",
+    "caniuse-lite": "^1.0.30001782",
+    "electron-to-chromium": "^1.5.328",
+    "node-releases": "^2.0.36",
+    "update-browserslist-db": "^1.2.3"
+  },
+  "engines": {
+    "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
   }
 }