ember-source 3.28.9 → 3.28.10

package/dist/header/license.js

@@ -5,5 +5,5 @@
  *            Portions Copyright 2008-2011 Apple Inc. All rights reserved.
  * @license   Licensed under MIT license
  *            See https://raw.github.com/emberjs/ember.js/master/LICENSE
- * @version   3.28.9
+ * @version   3.28.10
  */

package/dist/packages/@ember/-internals/metal/index.js

@@ -1281,7 +1281,7 @@ function _getProp(obj, keyName) {
 
   return value;
 }
-function _getPath(root, path) {
+function _getPath(root, path, forSet) {
   let obj = root;
   let parts = typeof path === 'string' ? path.split('.') : path;
 
@@ -1290,7 +1290,13 @@ function _getPath(root, path) {
       return undefined;
     }
 
-    obj = _getProp(obj, parts[i]);
+    let part = parts[i];
+
+    if (forSet && (part === '__proto__' || part === 'constructor')) {
+      return;
+    }
+
+    obj = _getProp(obj, part);
   }
 
   return obj;
@@ -1443,7 +1449,7 @@ function _setPath(root, path, value, tolerant) {
   let parts = path.split('.');
   let keyName = parts.pop();
   assert('Property set failed: You passed an empty path', keyName.trim().length > 0);
-  let newRoot = _getPath(root, parts);
+  let newRoot = _getPath(root, parts, true);
 
   if (newRoot !== null && newRoot !== undefined) {
     return set(newRoot, keyName, value);

package/dist/packages/ember/version.js

@@ -1 +1 @@
-export default "3.28.9";
+export default "3.28.10";

package/docs/data.json

@@ -3,7 +3,7 @@
     "name": "The Ember API",
     "description": "The Ember API: a framework for building ambitious web applications",
     "url": "https://emberjs.com/",
-    "version": "3.28.9"
+    "version": "3.28.10"
   },
   "files": {
     "node_modules/rsvp/lib/rsvp/promise/all.js": {
@@ -8559,7 +8559,7 @@
     },
     {
       "file": "packages/@ember/-internals/metal/lib/property_get.ts",
-      "line": 161,
+      "line": 169,
       "description": "Retrieves the value of a property from an Object, or a default value in the\ncase that the property returns `undefined`.\n\n```javascript\nimport { getWithDefault } from '@ember/object';\ngetWithDefault(person, 'lastName', 'Doe');\n```",
       "itemtype": "method",
       "name": "getWithDefault",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ember-source",
-  "version": "3.28.9",
+  "version": "3.28.10",
   "description": "A JavaScript framework for creating ambitious web applications",
   "keywords": [
     "ember-addon"
@@ -155,7 +155,7 @@
   "ember-addon": {
     "after": "ember-cli-legacy-blueprints"
   },
-  "_originalVersion": "3.28.9",
+  "_originalVersion": "3.28.10",
   "_versionPreviouslyCalculated": true,
   "publishConfig": {
     "tag": "old"