mixin-deep 1.3.1 → 1.3.2

package/index.js

@@ -23,7 +23,7 @@ function mixinDeep(target, objects) {
  */
 
 function copy(val, key) {
-  if (key === '__proto__') {
+  if (!isValidKey(key)) {
     return;
   }
 
@@ -46,6 +46,17 @@ function isObject(val) {
   return isExtendable(val) && !Array.isArray(val);
 }
 
+/**
+ * Returns true if `key` is a valid key to use when extending objects.
+ *
+ * @param  {String} `key`
+ * @return {Boolean}
+ */
+
+function isValidKey(key) {
+  return key !== '__proto__' && key !== 'constructor' && key !== 'prototype';
+};
+
 /**
  * Expose `mixinDeep`
  */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mixin-deep",
   "description": "Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "homepage": "https://github.com/jonschlinkert/mixin-deep",
   "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
   "repository": "jonschlinkert/mixin-deep",