Resolve a dot-separated path through a data value.
Supports array index notation: field[0].
Path segments naming a prototype-polluting property (__proto__,
constructor, prototype) refuse to resolve and return undefined.
Without the refusal, an attacker-supplied path would read
Object.prototype (or similar) and surface fields injected into the
runtime prototype chain as if they belonged to the user's data.
Resolve a dot-separated path through a data value. Supports array index notation:
field[0].Path segments naming a prototype-polluting property (
__proto__,constructor,prototype) refuse to resolve and returnundefined. Without the refusal, an attacker-supplied path would readObject.prototype(or similar) and surface fields injected into the runtime prototype chain as if they belonged to the user's data.