fix(core): allow all Object.prototype key access on strict providers

Papooch · Feb 9, 2025 · d2f2f0a · d2f2f0a
1 parent f9b14d4
commit d2f2f0a
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/packages/core/src/lib/proxy-provider/proxy-provider-manager.ts b/packages/core/src/lib/proxy-provider/proxy-provider-manager.ts
@@ -218,8 +218,9 @@ export class ProxyProviderManager {
 }
 
 const allowedPropertyAccess = new Set([
-    // used by various libraries that scan existing providers (e.g. GraphQL)
-    'constructor',
+    // Allow all default properties of Object.prototype
+    // as they're often used by other libraries for duck typing
+    ...Object.getOwnPropertyNames(Object.prototype),
     // used by Nest to check for async providers
     'then',
     // checked by Nest to trigger lifecycle hooks