fix(openapi): prevent prototype pollution through object values in bracket notation - #2024

Merged

dinwwwh merged 3 commits into

middleapi:mainfrom

dinwwwh:claude/prototype-injection-bracket-notation-e86b37

Sep 15, 2026

Commits on Sep 14, 2026

fix(openapi): prevent prototype pollution through object values in bracket notation
dinwwwh
committed
790eb17
refactor(openapi): simplify the bracket notation deserializer walk
dinwwwh
committed
a326989
test(shared): cover setOwn and the findDeepMatches skip branch
dinwwwh
committed
79dad15