fix(db): prevent prototype pollution via select() alias paths (#1584) - #1595

Merged

kevin-dp merged 8 commits into

TanStack:mainfrom

kevin-dp:fix/1584-select-alias-prototype-pollution

Jun 26, 2026

Commits on Jun 17, 2026

test: reproduce prototype pollution via select() alias (#1584)
kevin-dp
committed
0dda114
fix(db): reject unsafe alias path segments in select() compiler
kevin-dp
committed
8bfe0be
ci: apply automated fixes
autofix-ci[bot]
authored
ad93509
test: address CodeRabbit review on prototype-pollution tests
kevin-dp
committed
0d6fba3
chore: add changeset for #1584 fix
kevin-dp
committed
6cc63e3
ci: apply automated fixes
autofix-ci[bot]
authored
5f3fe93

Commits on Jun 26, 2026

test: move prototype-pollution tests into select.test.ts

kevin-dp
and
claude
committed
c3c9ae5
test: drop issue number from prototype-pollution describe

kevin-dp
and
claude
committed
0d65f84