additional test for constructor prototype pollution

substack · substack · commit 1043d212c3ca · 2020-03-11T09:20:03.000-10:00
diff --git a/test/proto.js b/test/proto.js
@@ -35,3 +35,10 @@ test('proto pollution (string)', function (t) {
     t.equal(argv.x.z, undefined);
     t.end();
 });
+
+test('proto pollution (constructor)', function (t) {
+    var argv = parse(['--constructor.prototype.y','123']);
+    t.equal({}.y, undefined);
+    t.equal(argv.y, undefined);
+    t.end();
+});
