Commit Graph

2830 Commits

Author SHA1 Message Date
Alex Brasetvik
60eb517911 Prevent prototype pollution chaining to code execution via _.template (#4355) 2019-07-09 09:09:55 -07:00
Kirill
1f8ea07746 fix: prototype pollution in _.defaultsDeep (#4336) 2019-06-24 09:17:55 -07:00
Erick Calder
e42cd97dae Fixes issue with Object prototype and the chaining syntax. [closes #4247] 2019-05-09 13:54:13 -07:00
Jeff Friesen
343456d696 Round Infinity with a precision argument returns Infinity (#4272)
* Round Infinity with a precision argument returns Infinity

* Also making sure this is true for -Infinity
* Tested with _.round(), _.floor() and _.ceil()

* Switch to using isFinite to check if number should be rounded

* Add tests for rounding NaN now that there is an isFinite check
2019-04-18 13:04:18 -07:00
Marc Hassan
0b8592a35c mergeWith: stack passed to customizer should always be defined (#4244)
Summary:
If the first values encountered in the `object` in mergeWith are not objects, `stack` is undefined when passed to the `customizer`. Once the first object-ish value is encountered, `stack` gets initialized, and all further calls to `customizer` include a defined `stack`. This PR makes `stack` always defined, even before the first object-ish value is encountered.
2019-03-21 20:54:53 -07:00
Amu
7084300d34 perf(toNumber): use +value to convert binary/octal/hexadecimal string (#4230) 2019-03-13 22:47:28 -07:00
liang feng
15b156512f cancel old timer (#4139) 2019-02-11 22:49:02 -08:00
John-David Dalton
1cb18dfada Revert "Ensure _.pick paths aren't interpolated twice. [closes #3952]"
This reverts commit 39a7eae40d.
2018-11-21 10:23:00 -06:00
John-David Dalton
39a7eae40d Ensure _.pick paths aren't interpolated twice. [closes #3952] 2018-09-17 22:38:33 -07:00
John-David Dalton
e0cbb4c8e6 Ensure map and set clones contain custom properties of source values. [closes #3951] 2018-09-17 22:31:34 -07:00
John-David Dalton
3ac4b261e4 Rebuild lodash and docs. 2018-09-12 10:44:01 -07:00
John-David Dalton
e5f9af5418 Remove prototype property check in safeGet(). 2018-08-31 15:22:17 -07:00
sina
79b9d20a91 Fix inconsistent merging of multiple sources to function property 2018-08-30 22:35:04 -07:00
Manuel Jasso
5c08f18d36 Prevent ReDoS
To fix https://github.com/lodash/lodash/issues/3359, modified reHasUnicodeWord to remove an unnecessary comma which made the regex greedy, this is only a test regex and not a matching regex. Added unit tests, this now should run under 5 ms instead of over 1000 ms for huge 50k+ char words.
2018-08-30 22:07:27 -07:00
John-David Dalton
90e6199a16 Ensure Object.prototype is not augmented by _.merge. 2018-08-30 22:06:15 -07:00
John-David Dalton
a65fd33603 Rebuild lodash and docs. 2018-04-24 15:26:43 -07:00
John-David Dalton
4680cdacc0 Rebuild lodash and docs. 2018-04-24 10:29:50 -07:00
John-David Dalton
852988e04a Use util.types to migrate DEP0103 in Node.js.
PR: #3704
2018-04-24 10:28:01 -07:00
John-David Dalton
ce32a89e3e Rebuild lodash and docs. 2018-02-03 22:35:25 -08:00
John-David Dalton
5e58cd216c Fix style nits. 2018-02-03 21:25:41 -08:00
John-David Dalton
5adb4ee95c Make _.defaults avoid accessing property values it doesn't need to. [closes #2983] 2018-02-03 21:25:41 -08:00
John-David Dalton
a73b92b58e Avoid using the values toString method in _.invert if it’s not a function. [closes #3260] 2018-02-03 21:25:41 -08:00
John-David Dalton
dac890a211 Enable _.words to detect ordinals in compound words. [closes #3561] 2018-02-02 18:10:02 -08:00
John-David Dalton
7167a78644 Replacing a regex in stringToPath with a quick character code check. (#3308) 2018-02-02 18:10:01 -08:00
John-David Dalton
f83197727b Avoid shadowing result in remainingWait. (#3280) 2018-02-02 18:10:01 -08:00
John-David Dalton
20c5307542 stringToPath: avoid shadowing variable. (#3226) 2018-02-02 18:10:01 -08:00
John-David Dalton
45ac7f3bcc Support symbols in property paths of set. [closes #3189] 2018-02-02 18:10:01 -08:00
John-David Dalton
7cb477a3a0 Use new to create the array clone. 2018-02-02 18:10:01 -08:00
John-David Dalton
b8c719d3be Fix cloneDeep with circularly dependent Sets/Maps. [closes #3122] 2018-02-02 18:09:54 -08:00
John-David Dalton
d8e069cc34 Avoid merging properties on to __proto__ objects. 2018-01-30 23:21:12 -08:00
John-David Dalton
165572022d Rebuild lodash and docs. 2017-01-06 07:50:36 -08:00
John-David Dalton
e33b15674d Ensure _.omit doesn’t mutate object with deep paths. [closes #2912] 2016-12-30 18:09:11 -06:00
John-David Dalton
708b962860 Rebuild lodash and docs. 2016-12-26 10:43:11 -06:00
John-David Dalton
f7263047bf Use a strict undefined check for arity in createWrap. 2016-12-21 15:23:54 -06:00
John-David Dalton
02fdf4e673 Wrap in ternary value within hashHas in parens for clarity. 2016-12-21 15:23:54 -06:00
John-David Dalton
e2c703a96f Avoid more coercion. 2016-12-21 15:23:54 -06:00
John-David Dalton
32fdfcc1e5 Avoid coercing position in _.startsWith, if it’s undefined. 2016-12-21 12:34:28 -06:00
John-David Dalton
b51786e72e Fix lazy sequence test fails. 2016-12-20 16:54:40 -06:00
John-David Dalton
482dc9478b Remove array length limit for lay evaluation. [closes #2874] 2016-12-20 16:54:40 -06:00
John-David Dalton
528b6a98a9 Minor doc space nit. [ci skip] 2016-12-06 15:15:09 +09:00
John-David Dalton
a8bcb5f3d5 ES6 to ES2015 nit. [ci skip] 2016-12-06 15:15:09 +09:00
Dave Wasmer
d429f90ec5 Mention ES6 delimiters in templateSettings docs (#2857) 2016-12-06 15:15:09 +09:00
John-David Dalton
72f559e1a3 Exit early from getSymbols if object is nullish. 2016-11-25 00:16:37 -06:00
Ophir LOJKINE
2f92d55024 Clarify _.isEqual docs on comparing functions and DOM nodes. [closes #2849] [ci skip] 2016-11-25 00:16:05 -06:00
John-David Dalton
bea4b29bc4 Remove unneeded Object coercions. 2016-11-24 23:41:10 -06:00
John-David Dalton
0cd4134bc6 Fix Android 5.1 test fails. 2016-11-24 23:41:10 -06:00
John-David Dalton
783e03ffa3 Simplify baseIsEqualDeep now that getSymbols returns only enumerable symbols. 2016-11-24 00:07:26 -06:00
John-David Dalton
1dddf27a39 Include only enumerable symbols in getSymbols result. [closes #2845] 2016-11-24 00:07:26 -06:00
John-David Dalton
2890eabf66 Replace isObject use with isObjectLike in baseIsEqual. 2016-11-21 23:34:21 -06:00
John-David Dalton
a3e077324a Add support for comparing symbol properties to _.isEqual. [closes #2840] 2016-11-21 23:34:21 -06:00