fix: prototype pollution issue (#6096)

pleerock · web-flow · commit db9d0fa62e85 · 2020-05-19T19:55:12.000+03:00
diff --git a/src/util/OrmUtils.ts b/src/util/OrmUtils.ts
@@ -75,7 +75,7 @@ export class OrmUtils {
         if (this.isObject(target) && this.isObject(source)) {
             for (const key in source) {
                 const value = source[key];
-                if (value instanceof Promise)
+                if (key === "__proto__" || value instanceof Promise)
                     continue;
 
                 if (this.isObject(value)
