32 lines
880 B
JavaScript
32 lines
880 B
JavaScript
|
"use strict";
|
||
|
|
|
||
|
|
var deffy = require("deffy");
|
||
|
|
|
||
|
|
/**
|
||
|
|
* objDef
|
||
|
|
* Easily set default fields in objects.
|
||
|
|
*
|
||
|
|
* @name objDef
|
||
|
|
* @function
|
||
|
|
* @param {Object} obj The input object.
|
||
|
|
* @param {String} field The field name.
|
||
|
|
* @param {Anything} defValue The default value.
|
||
|
|
* @param {Object} opts The [`deffy`](https://github.com/IonicaBizau/deffy) options.
|
||
|
|
* @return {Anything} The set value.
|
||
|
|
*/
|
||
|
|
module.exports = function objDef(obj, field, defValue, opts) {
|
||
|
|
if (isPrototypePolluted(field)) {
|
||
|
|
throw new Error('Restricted setting magical attributes');
|
||
|
|
}
|
||
|
|
return obj[field] = deffy(obj[field], defValue, opts);
|
||
|
|
};
|
||
|
|
|
||
|
|
/*!
|
||
|
|
* isPrototypePolluted
|
||
|
|
* Blacklist certain keys to prevent Prototype Pollution
|
||
|
|
* @param {Anything} key The object key
|
||
|
|
* @return {Boolean}
|
||
|
|
*/
|
||
|
|
function isPrototypePolluted(key) {
|
||
|
|
return ['__proto__', 'constructor', 'prototype'].includes(key);
|
||
|
|
}
|