Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: protobufjs/protobuf.js
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: protobufjs-v7.5.4
Choose a base ref
...
head repository: protobufjs/protobuf.js
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: protobufjs-v7.5.5
Choose a head ref
  • 3 commits
  • 3 files changed
  • 1 contributor

Commits on Apr 15, 2026

  1. fix: do not allow setting __proto__ in Message constructor (#2126) 

    When a properties object passed to Message constructor contains
__proto__, such as in

const properties = JSON.parse('{"__proto__": {"polluted": "yes"}}');
const message = new protobuf.Message(properties);

the resulting message object will have message.polluted defined
which is not intended.

Filter out __proto__ when iterating over the keys of the properties.
    @alexander-fenster
    alexander-fenster committed Apr 15, 2026
    Configuration menu
    Copy the full SHA
    086b19d View commit details
    Browse the repository at this point in the history

  2. fix: filter invalid characters from the type name (#2127) 

    Fixes #2124.

There is no reason why the type name would contain anything other than
alphanumeric characters. Filter the remaining characters with a regex.
    @alexander-fenster
    alexander-fenster committed Apr 15, 2026
    Configuration menu
    Copy the full SHA
    ff7b2af View commit details
    Browse the repository at this point in the history

  3. chore: release 7.5.5

    @alexander-fenster
    alexander-fenster committed Apr 15, 2026
    Configuration menu
    Copy the full SHA
    b7bdfaf View commit details
    Browse the repository at this point in the history
Loading