fix prototype pollution vulnerability

ashaffer · Nov 7, 2018 · a43cffe · a43cffe
1 parent a63061a
commit a43cffe
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/index.js b/lib/index.js
@@ -10,7 +10,7 @@ var path = require('path')
 
 var relative = path.relative
 var lastCwd = process.cwd()
-var cache = {}
+var cache = Object.create(null)
 
 /**
  * Expose cachedPathRelative