mixin-deep 1.3.0 → 1.3.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of mixin-deep might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/index.js +4 -0
  2. package/package.json +1 -1
package/index.js CHANGED
@@ -23,6 +23,10 @@ function mixinDeep(target, objects) {
23
23
  */
24
24
 
25
25
  function copy(val, key) {
26
+ if (key === '__proto__') {
27
+ return;
28
+ }
29
+
26
30
  var obj = this[key];
27
31
  if (isObject(val) && isObject(obj)) {
28
32
  mixinDeep(obj, val);
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "mixin-deep",
3
3
  "description": "Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.",
4
- "version": "1.3.0",
4
+ "version": "1.3.1",
5
5
  "homepage": "https://github.com/jonschlinkert/mixin-deep",
6
6
  "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
7
7
  "repository": "jonschlinkert/mixin-deep",