Function safeAssign

src/proxy/mailbox/store.js:26–35

(target, fields)

// __proto__/constructor/prototype could pollute Object.prototype during
// _rebuildIndex (see GHSA-2cjr-5v3h-v2w4).
function safeAssign(target, fields) {
  if (!fields || typeof fields !== 'object') return target;
  const keys = Object.keys(fields);
  for (let i = 0; i < keys.length; i++) {
    const k = keys[i];
    if (k === '__proto__' || k === 'constructor' || k === 'prototype') continue;
    target[k] = fields[k];
  }
  return target;
}

function sanitizeRow(row) {
  if (!row || typeof row !== 'object') return row;