Giters

auth0 / express-jwt

connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Possible prototype pollution with lodash.set

JRLRJ opened this issue · comments

commented

Description

Commit bbd3606 brought back the usage of lodash.set that was removed in #271 where it was replaced with lodash. All details are in the original issue 271 and the original PR diff looks like it would almost apply cleanly.

Reproduction

See #271

Environment

See #271

commented

lodash was removed in #317, closing.