Merge 9d27350 into 837a3cc

sequelize · Oct 25, 2023 · 5ebe2fe · 5ebe2fe
2 parents 837a3cc + 9d27350
commit 5ebe2fe
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/src/shared/object.ts b/src/shared/object.ts
@@ -14,7 +14,10 @@ export function deepAssign<T, S>(target: T, source: S): T & S;
 export function deepAssign<S>(target: {}, source: S): S;
 export function deepAssign(target: any, ...sources: any[]): any {
   sources.forEach((source) => {
-    Object.getOwnPropertyNames(source).forEach((key) => assign(key, target, source));
+    Object.getOwnPropertyNames(source).forEach(
+      (key) =>
+        !['__proto__', 'constructor', 'prototype'].includes(key) && assign(key, target, source)
+    );
     /* istanbul ignore next */
     if (Object.getOwnPropertySymbols) {
       Object.getOwnPropertySymbols(source).forEach((key) => assign(key, target, source));