solidjs / solid

86%

main: 86%

LAST BUILD ON BRANCH prototype-fix

branch: prototype-fix

CHANGE BRANCH

x

Reset

Sync Branches

• prototype-fix
• add-code-format
• add-jsx-dev-runtime
• add-names
• add-observable-tests
• add-scheduler-cancel-task-test
• after-create-signal-hook
• after-register-graph
• allow-null-prototype-in-mutable
• at-a-glance
• bugfix/656
• bump-pnpm
• bump-workflows
• catch-error-propagation
• change-onerror-mechanism
• changelog-1.4
• checkProxy
• chore/replace-hope-ui-with-kobalte
• cleanup
• client-only
• cody-export-dynamic-props
• context-name
• contributing-build
• createresource-types
• dependabot/npm_and_yarn/babel/core-7.29.6
• dependabot/npm_and_yarn/babel/traverse-7.23.2
• dependabot/npm_and_yarn/cross-spawn-6.0.6
• dependabot/npm_and_yarn/express-4.19.2
• dependabot/npm_and_yarn/express-4.20.0
• dependabot/npm_and_yarn/follow-redirects-1.14.8
• dependabot/npm_and_yarn/nanoid-3.3.8
• dependabot/npm_and_yarn/semver-5.7.2
• dependabot/npm_and_yarn/seroval-1.4.1
• dependabot/npm_and_yarn/seroval-1.5.0
• dependabot/npm_and_yarn/shell-quote-1.7.3
• dependabot/npm_and_yarn/vite-4.4.8
• dependabot/npm_and_yarn/vite-4.5.1
• dependabot/npm_and_yarn/vite-4.5.2
• dependabot/npm_and_yarn/vite-4.5.3
• dependabot/npm_and_yarn/vite-4.5.5
• dependabot/npm_and_yarn/vite-5.4.14
• dependabot/npm_and_yarn/vitest-3.2.6
• dependabot/npm_and_yarn/word-wrap-1.2.4
• dependabot/npm_and_yarn/ws-8.17.1
• dev-additions
• dev-component-function
• doc/casing
• docs/solid-element-props-gotcha
• doorway-for-class-components
• dynamic-splitProps-return-proxies
• export-memo-interface
• export-options-types
• expose-setter-types
• feat-server-value
• feat-store-configurable-unwrappable-types
• feat-store-types
• feat/PULL-REQUEST-TEMPLATE
• feature/store-disallow-setting-readonly
• fix-catch-error-propagation
• fix-create-resource
• fix-create-root
• fix-custom-keyof-allowing-number-as-keyof-never
• fix-deep-readonly-mutable-not-recursive
• fix-element-owner-markers-main
• fix-hash-value-bigint
• fix-infinite-loop
• fix-is-server-type
• fix-jsx-runtimes
• fix-lazy
• fix-lazy-hmr
• fix-lazy-timeout
• fix-merge-props
• fix-merge-props-spread
• fix-missing-portal-ref-type
• fix-observable-rxjs-next
• fix-onerror-order
• fix-owner-leak
• fix-prototype-getters
• fix-quotes
• fix-refetch
• fix-refetch-return-type
• fix-resource-initial-value-inference
• fix-resource-options-type
• fix-run-with-owner
• fix-server-lazy
• fix-set-store-traversed
• fix-set-store-with-index-signature-types
• fix-setter-assignability
• fix-setter-param-type
• fix-signal-setter-generics
• fix-solid-refresh-main
• fix-store-setter-with-complex-types
• fix-store-types-create-store-initial-value
• fix-store-types-generics-and-void-setter
• fix-stores
• fix-suspense-suite
• fix-ts-nodenext
• fix-type
• fix-typo
• fix-unowned-root-dev
• fix-untrack
• fix/2668-leaked-produce-draft-proxy-invariant
• fix/dev-exported-twice
• fix/memo-undefined-in-transition
• fix/module-exports
• fix/null-proto-hasownproperty
• fix/portal-cleanup-guard
• fix/reconcile-symbol-keys
• fix/repeat-disjoint-window
• fix/splitprops-proxy-shared-keys
• fix/ssr-SuspenseList
• fix/ssr-createResource
• fix/symbol-observable-type
• fix/usage-of-deprecated-version-of-nodejs
• for-index-union-types
• fragment-props-children
• gitpod-pnpm
• goldEli-fix-the-typo
• graph
• graph-property
• hotfix-merge-props
• html-named-export
• ignore-internal-signals
• improve-Setter-type
• improve-errors-handling
• improve-setter-type
• improve_ts_config
• is-attribute-dynamic
• is-dev
• is-regression
• issues/1020
• lazy-forward-all-args
• lazy-use-devComponent
• main
• more-jsdoc
• names-and-ids
• next
• nksaraf-export-owner
• observable-nit
• observe-stores
• ocavue/h-type
• on-cleanup-generic
• otonashixav-feat-resource-type-improvements-alternative
• owner-props
• patch-1
• patch-10
• patch-2
• patch-3
• patch-6
• patch-8
• patch-9
• perf-props
• perf-splitProps-flat
• perf/with_createMemo_typings
• pnpm
• prettier-code-format
• props-types
• reexport-all-signal-exports
• refactor-effect-types
• refactor-merge-props-type
• refactor-remove-stores-readonly
• refactor-split-props-type
• refactor-store-remove-readonly
• refactor-store-types
• refactor-store-types-2
• refactor-switch-downstream-and-upstream-terms
• refactor-types-clearer-store-error
• refactor-types-on
• refs/heads/main
• refs/pull/1842/merge
• refs/pull/1847/merge
• refs/pull/1881/merge
• refs/pull/1885/merge
• refs/pull/1889/merge
• refs/pull/1896/merge
• refs/pull/1904/merge
• refs/pull/1920/merge
• refs/pull/1930/merge
• remove-name-generation
• removeBrowserPackageJson
• resource-error
• resource-resolving-args
• revert-stupidity
• setter-fix-3
• setter-type-fix
• setter-type-fix-2
• show-double-evaluation
• signal-hash-untrack-json-stringify
• solid-ssr-windows-fix
• source-entry
• split-props-omit-fix
• splitProps-defineProperty-default-configurable
• ssr-children-export
• ssr-doc
• test-props
• throw-error-ssr-browser
• tiny-use-context-optimization
• ts-5.7
• tweaks
• type-improvements
• type-selector
• types-exports
• types/update-jsdoc-comments
• typescript-improvements
• typing/classlist
• untrack-fast-track
• update-contributing
• update-dom-expressions
• update-dom-expressions-to-0.40.3
• update-typescript
• update/script
• updated-readme-video
• use-transition-doc-comment
• warn-unhandled-errors
• web-storage-node-resolution

Build # 25890642875

Build Type

Pull #2683

github

Committed by web-flow

Commit Message

Merge dad5b0654 into 704e9086f

Pull Request Pull Request #2683: fix(store): prevent prototype pollution via setStore paths

Coverage Stats

944 of 1164 branches covered (81.1%)

Branch coverage included in aggregate %.

19 of 19 new or added lines in 1 file covered. (100.0%)

59 existing lines in 3 files now uncovered.

2401 of 2722 relevant lines covered (88.21%)

504.5 hits per line