test: CWE-1321

wollardj · Mar 31, 2022 · c5b4db0 · c5b4db0
1 parent 3ad9688
commit c5b4db0
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/__tests__/CWE-1321.test.ts b/__tests__/CWE-1321.test.ts
@@ -0,0 +1,16 @@
+import plist from "../src";
+
+/** @see https://cwe.mitre.org/data/definitions/1321.html */
+
+describe("CWE-1321", () => {
+ it("filters out unsafe properties", () => {
+ const unsafeDoc = { __proto__: 42, foo: "bar" };
+ const safeDoc = plist.parse(plist.stringify(unsafeDoc));
+
+ expect(safeDoc).toMatchInlineSnapshot(`
+ Object {
+ "foo": "bar",
+ }
+ `);
+ });
+});