fix: address Cubic round 5 issues — prototype-pollution guard, URL-encode, JSONC preservation, config-context warning, dynamic config path

2026-02-08 22:35:16 +09:00
parent be03e27faf
commit 8a2c3cc98d
5 changed files with 24 additions and 4 deletions
@@ -5,6 +5,7 @@ export function deepMergeRecord<TTarget extends Record<string, unknown>>(
  const result: TTarget = { ...target }

  for (const key of Object.keys(source) as Array<keyof TTarget>) {
+    if (key === "__proto__" || key === "constructor" || key === "prototype") continue
    const sourceValue = source[key]
    const targetValue = result[key]