Reorder test cases

robinvdvleuten · May 2, 2022 · 4e526f2 · 4e526f2
1 parent 85b59f9
commit 4e526f2
Showing 1 changed file with 11 additions and 11 deletions.
diff --git a/test.js b/test.js
@@ -56,6 +56,17 @@ cases('get(undefined, key, def)', ({ key, value, def }) => {
   "get(undefined, 'one', 'foo')": { key: 'one', value: 'foo', def: 'foo' },
 });
 
+// Prevent prototype pollution.
+cases('get(Object, key)', ({ key, value, test }) => {
+  shvl.set({}, key, value);
+  expect(shvl.get(Object, test || key)).toEqual(undefined);
+}, {
+  "set({}, '__proto__.b', 'foo')": { key: '__proto__.b', value: 'foo' },
+  "set({}, 'a.__proto__.b', 'foo')": { key: 'a.__proto__.b', value: 'foo' },
+  "set({}, 'constructor.prototype.b', 'foo')": { key: 'constructor.prototype.b', value: 'foo'},
+  "set({}, 'a.constructor.prototype.b', 'foo')": { key: 'a.constructor.prototype.b', value: 'foo'}
+});
+
 cases('set(obj, key, value)', ({ obj, key, value, expected }) => {
   expect(shvl.set(obj || {}, key, value)).toEqual(expected);
 }, {
@@ -77,17 +88,6 @@ cases('set({}, key, value)', ({ obj, key, value, expected }) => {
   "set(obj, 'a.constructorx.b', 'foo')": { key: 'a.constructorx.b', value: 'foo', expected: { a: { constructorx: { b: 'foo' } } } },
 });
 
-// prevent prototype pollution
-cases('get(Object, key)', ({ key, value, test }) => {
-  shvl.set({}, key, value);
-  expect(shvl.get(Object, test || key)).toEqual(undefined);
-}, {
-  "set({}, '__proto__.b', 'foo')": { key: '__proto__.b', value: 'foo' },
-  "set({}, 'a.__proto__.b', 'foo')": { key: 'a.__proto__.b', value: 'foo' },
-  "set({}, 'constructor.prototype.b', 'foo')": { key: 'constructor.prototype.b', value: 'foo'},
-  "set({}, 'a.constructor.prototype.b', 'foo')": { key: 'a.constructor.prototype.b', value: 'foo'}
-});
-
 cases('set(undefined, key, value)', ({ obj, key, value }) => {
   expect(() => shvl.set(undefined, key, val)).toThrow();
 }, {