From ea2d1e2c4750c174281540f2db029a0b23c906c8 Mon Sep 17 00:00:00 2001 From: "aikido-autofix[bot]" <119856028+aikido-autofix[bot]@users.noreply.github.com> Date: Sat, 26 Apr 2025 23:37:55 +0000 Subject: [PATCH] fix(security): autofix Prototype pollution vulnerability detected --- libs/ui/app/workflows/[id]/saml.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libs/ui/app/workflows/[id]/saml.tsx b/libs/ui/app/workflows/[id]/saml.tsx index 62a3fc3e5..3a8edce0c 100644 --- a/libs/ui/app/workflows/[id]/saml.tsx +++ b/libs/ui/app/workflows/[id]/saml.tsx @@ -21,7 +21,7 @@ function removeNullValues(obj: any) { for (const key in obj) { if (obj[key] === null) continue if (typeof obj[key] === "object") { - newObj[key] = removeNullValues(obj[key]) + if (!["__proto__", "constructor", "prototype"].includes(key)) newObj[key] = removeNullValues(obj[key]) } else { newObj[key] = obj[key] }