forked from cristianstaicu/SecBench.js
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsink_locations_prototype_pollution.txt
187 lines (186 loc) · 7.29 KB
/
sink_locations_prototype_pollution.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
jquery_1.11.0 > dist/jquery.js:230:21
mathjs_7.4.0 > lib/utils/object.js:131:17
set-or-get_1.2.10 > build/utils.js:391:28
grunt-util-property_0.0.2 > main.js:41:21
nis-utils_0.6.10 > lib/object.js:166:40
merge-change_1.0.1 > utils.js:63:26
mout_1.0.0 > object/set.js:9:48
mootools_1.5.2 > lib/mootools-core-1.5.2-server.js:355:24
typeorm_0.2.24 > build/utils.js:391:28
style-dictionary_2.10.2 > lib/utils/deepExtend.js:76:26
immer_8.0.0 > src/plugins/patches.ts:245:16
fluentui-styles_0.47.15 > styles/dist/commonjs/deepmerge.ts:16:9
ts-nodash_1.2.1 > lib/Merge.js:43:31
worksmith_1.0.0 > index.js:300:30
js-data_3.0.9 > src/utils.js:487:18
jointjs_2.2.1 > dist/joint.min.js:49:1313
sahmat_1.0.0 > build/utils.js:391:28
algoliasearch-helper_3.6.0 > src/functions/merge.js:38:19
uifabric-utilities_7.20.2 > utilities/src/merge.ts:33:21
object-collider_1.0.3 > src/utils/CollideUtil.ts:83:22
swiper_6.5.0 > cjs/utils/utils.js:110:25
nodee-utils_1.2.2 > lib/object.js:210:40
tsed-core_5.62.3 > core/src/utils/deepExtends.ts:36:15
jointjs_3.4.0 > dist/joint.min.js:8:103865
mquery_3.2.1 > lib/utils.js:137:15
total.js_3.4.6 > utils.js:6624:11, <anonymous>:3:133
changeset_0.1.0 > index.js:81:25
class-transformer_0.1.1 > TransformOperationExecutor.ts:163:46
utilitify_1.0.2 > utils/utils/mergeDeep.ts:17:18
deep-override_1.0.0 > src/index.js:53:23
node-forge_0.9.0 > lib/util.js:2536:22
firebase-util_0.3.3-canary.c47ba31d0 > util/src/deepCopy.ts:68:49
paypal-adaptive_0.4.1 > lib/paypal-adaptive.js:31:22
confucious_0.0.12 > confucious.js:48:21
multi-ini_2.1.0 > lib/parser.js:193:38
simpl-schema_1.10.0 > dist/utility/merge.js:31:27
decal_2.1.3 > src/utils/extend.js:50:62
supermixer_1.0.3 > dist/mixer.js:86:19
field_1.0.1 > lib/field.js:50:20
bodymen_1.0.0 > dist/index.js:44:26
decal_2.0.0 > src/utils/set.js:62:21
firebase-util_0.3.2 > util/src/deepCopy.ts:68:49
safe-obj_1.0.0 > lib/index.js:122:28
fast-json-patch_2.0.4 > lib/core.js:28:18
lodash_4.17.15 > lodash.js:2559:21
deep-defaults_1.0.5 > lib/index.js:16:21
record-like-deep-assign_1.0.1 > src/mod.ts:34:9
merge-deep2_3.0.5 > index.js:45:19
safe-flat_2.0.0 > src/index.js:48:30
utils-extend_1.0.8 > index.js:46:19
querymen_2.1.3 > dist/index.js:46:26
sds_3.2.0 > js:34:13
gammautils_0.0.81 > lib/objectUtils.js:146:34
deeply_3.0.0 > lib/reduce_object.js:19:14
merge-deep_3.0.0 > index.js:45:19
ts-dot-prop_1.4.0 > src/index.ts:72:21
bmoor_0.8.11 > src/core.js:194:18
objtools_3.0.0 > lib/index.js:440:18
inireader_1.0.0 > lib/inireadercore.js:310:60
mithril_1.0.0 > mithril.js:982:19
iniparserjs_1.0.4 > ini_parser.js:63:50
gedi_1.6.3 > gedi.js:393:32
lodash_4.17.11 > lodash.js:2559:21
lodash_4.17.10 > lodash.js:2573:21
lodash_4.17.9 > lodash.js:2573:21
nconf-toml_0.0.1 > lib/compiler.js:55:18
defaults-deep_0.2.4 > index.js:26:21
prototyped.js_2.0.0 > lib/index.js:66:14
convict_6.0.0 > src/main.js:565:24
confinit_0.3.0 > index.ts:112:15
phpjs_1.3.2 > build/npm.js:6406:24
101_1.0.0 > index.js:32:16
cached-path-relative_1.0.1 > lib/index.js:39:19
node-dig_1.0.1 > lib/dig/index.js:4:33
cookiex-deep_0.0.6 > deep/dist/assigner.js:13:31
dot-notes_3.2.0 > lib/create.js:43:19
libnested_1.5.0 > index.js:27:20
json8-merge-patch_1.0.1 > lib/apply.js:25:12
objnest_5.0.0 > lib/objnest.js:44:35
merge-recursive_0.0.3 > lib/index.js:66:14
think-helper_1.1.0 > index.js:122:22
copy-props_2.0.4 > index.js:197:14
madlib-object-utils_0.1.6 > lib/utils.js:56:22
lyngs-digger_1.0.7 > digger/dist/index.js:2120:23
node-extend_1.0.0 > lib/extend.js:86:26
lutils_2.4.0 > merge/merge.ts:114:18
rdf-graph-array_0.3.0 > index.js:208:29
getobject_0.1.0 > lib/getobject.js:48:23
linux-cmdline_1.0.0 > index.js:48:15
patchmerge_1.0.1 > index.js:93:24
json-ptr_1.1.0 > index.js:277:26
lyngs-merge_1.0.9 > merge/dist/index.js:2684:20
shvl_2.0.1 > index.js:10:40
viking04-merge_1.0.0 > merge/index.js:9:18
set-value_3.0.0 > index.js:41:20
merge-options_1.0.0 > index.js:73:16
nested-property_0.0.5 > index.js:95:27
node-oojs_1.4.0 > bin/format/oojs.js:65:39
just-safe-set_1.0.0 > index.js:36:17
safetydance_2.0.1 > index.js:215:25
mixin-deep_1.3.0 > index.js:30:15
yargs-parser_6.0.0 > index.js:587:14
deep-extend_0.5.0 > lib/deep-extend.js:117:17
js-ini_1.2.0 > src/parse.ts:68:58
y18n_3.2.1 > index.js:156:34
object-path-set_1.0.0 > index.js:19:13
fabiocaccamo-utils.js_0.17.0 > utils.js/dist/utils.js:2365:33
aurelia-path_1.1.7 > dist/commonjs/aurelia-path.js:163:42
getsetdeep_4.15.0 > edition-esnext/index.js:74:17
upmerge_0.1.7 > build/upmerge.js:1:1247
merge_2.1.0 > lib/src/index.js:59:19
plain-object-merge_1.0.1 > dist/index.js:18:29
brikcss-merge_1.3.0 > merge/dist/lib/merge.js:2:1599
think-config_1.0.0 > index.js:50:22
vega-util_1.13.0 > build/vega-util.js:203:16
properties-reader_2.0.0 > src/properties-reader.js:200:27
dotty_0.0.1 > lib/index.js:147:17
defaults-deep_0.2.0 > index.js:20:16
dset_1.0.0 > dist/dset.js:6:18
expand-hash_1.0.1 > index.js:19:13
deep-get-set_1.1.0 > index.js:30:16
patchmerge_1.0.0 > index.js:93:24
component-flatten_1.0.1 > index.js:56:26
hoek_5.0.0 > lib/index.js:137:29
json-pointer_0.6.1 > index.js:98:18
keyget_2.2.0 > index.js:111:17
minimist_1.0.0 > index.js:189:16
pathval_1.1.0 > index.js:158:25
asciitable.js_1.0.2 > asciitable.umd.js:50:104
flattenizer_0.0.5 > lib/flattenizer.min.js:1:1550
property-expr_2.0.2 > index.js:55:28
json-schema_0.3.0 > lib/validate.js:217:27
object-path_0.11.0 > index.js:19:13
smart-extend_1.7.3 > dist/smart-extend.js:1:2739
objection_2.0.0 > lib/utils/objectUtils.js:246:32
strikeentco-set_1.0.0 > set/main.js:11:17
arr-flatten-unflatten_1.1.4 > unflatten.js:17:16
lutils-merge_0.2.6 > merge.js:156:23
predefine_0.1.2 > index.js:284:21
set-in_1.0.0 > index.js:41:17
ion-parser_0.5.2 > parser.js:359:13
mixin-deep_2.0.0 > index.js:21:17
eivifj-dot_1.0.2 > dot/index.js:22:13
nested-object-assign_1.0.3 > lib/nestedObjectAssign.js:1:787
deeps_1.4.5 > index.js:226:94
safe-object2_1.0.3 > lib/index.js:1:1869
undefsafe_2.0.2 > lib/undefsafe.js:106:17
json-pointer_0.6.0 > index.js:91:18
flat_5.0.0 > index.js:145:21
x-assign_0.1.4 > index.js:34:20
doc-path_2.0.0 > src/path.js:54:27
objutil_2.17.3 > dist/objutil.cjs.js:192:59
keyd_1.3.4 > index.js:76:60
mpath_0.4.1 > lib/index.js:269:17
deephas_1.0.5 > deepHas.js:65:20
just-extend_3.0.0 > index.js:52:23
deep-set_1.0.0 > index.js:33:31
extend-merge_1.0.5 > base-extend.js:41:21
assign-deep_1.0.0 > index.js:22:23
mergify_1.0.2 > index.js:15:11
ini_1.3.5 > ini.js:109:14
promisehelpers_0.0.5 > src/index.js:16:25
dot-object_2.1.2 > index.js:415:25
putil-merge_3.0.0 > lib/merge.js:72:19
tiny-conf_1.1.0 > tiny-conf.js:73:17
nestie_1.0.0 > dist/index.js:29:14
rfc6902_4.0.2 > patch.js:57:21
set-deep-prop_1.0.0 > set-deep-prop.js:20:34
deepmergefn_1.1.0 > index.js:12:30
dot-prop_2.0.0 > index.js:32:14
object-path_0.11.4 > index.js:110:28
js-extend_0.0.1 > extend.js:17:23
extend_3.0.1 > index.js:77:20
ini-parser_0.0.2 > index.js:14:20
flat-wrap_1.0.2 > index.js:193:43
merge-objects_1.0.3 > merge-objects.js:20:20
jsonpointer_4.0.0 > jsonpointer.js:43:18
deepref_1.1.1 > index.js:29:28
set-object-value_0.0.5 > build/cjs/src/index.js:24:15
eivindfjeldstad-dot_0.0.1 > index.js:20:13
deap_1.0.0 > lib/connie-lang.js:35:28
aws-sdk-shared-ini-file-loader_1.0.0-rc.8 > shared-ini-file-loader/src/index.ts:108:20
nedb_1.8.0 > lib/model.js:304:14
i18next_19.7.0 > build/utils.js:391:28
connie_0.1.0 > lib/connie-lang.js:43:28
node-ini_1.0.0 > node-ini.js:25:66