From 7d977b6a2532b47253e895b93959d0c6865d0739 Mon Sep 17 00:00:00 2001
From: Zeroday BYTE <github@zerodaysec.org>
Date: Sun, 25 May 2025 21:19:41 +0700
Subject: [PATCH] Update open-api-client.js

---
 src/services/open-api-client.js | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/services/open-api-client.js b/src/services/open-api-client.js
index af13edc12..d265c7647 100644
--- a/src/services/open-api-client.js
+++ b/src/services/open-api-client.js
@@ -159,11 +159,14 @@ class OpenApiClient {
       schema = this.getRef(schema.$ref, domain);
     }
 
+    const safeSchema = Object.create(null);
     Object.entries(schema).forEach(([key, value]) => {
-      schema[key] = this.evaluateRefs(value, domain);
+      if (key !== '__proto__' && key !== 'constructor' && key !== 'prototype') {
+        safeSchema[key] = this.evaluateRefs(value, domain);
+      }
     });
 
-    return schema;
+    return safeSchema;
   }
 
   getRef(ref, domain) {