fix: exception when glob pattern contains constructor

Author: Jason3S

lib/constants.js

@@ -98,11 +98,11 @@ module.exports = {
  REGEX_REMOVE_BACKSLASH: /(?:\[.*?[^\\]\]|\\(?=.))/g,
 
  // Replace globs with equivalent patterns to reduce parsing time.
- REPLACEMENTS: {
+ REPLACEMENTS: Object.assign(Object.create(null), {
  '***': '*',
  '**/**': '**',
  '**/**/**': '**'
- },
+ }),
 
  // Digits
  CHAR_0: 48, /* 0 */

test/malicious.js

@@ -30,4 +30,9 @@ describe('handling of potential regex exploits', () => {
  assert(!isMatch('A', `!(${repeat(500)}A)`, { maxLength: 499 }));
  }, /Input length: 504, exceeds maximum allowed length: 499/);
  });
+ it('should be able to accept Object instance properties', () => {
+ assert(isMatch('constructor', 'constructor'), 'valid match');
+ assert(isMatch('__proto__', '__proto__'), 'valid match');
+ assert(isMatch('toString', 'toString'), 'valid match');
+ });
 });