JSON.parse that filters out __proto__

no-proto-json-parse.js

JSON.parse = (() => {
  const undef = void 0;
  const jsonParse = JSON.parse;
  function noProtoReviver (key, value) {
    if (key === '__proto__') {
      console.warn('Removed __proto__ from parsed JSON');
      return undef; // Remove property entirely
    }
    return value;
  }
  return function parse (text, reviver) {
    const compositionOfRevivers = reviver
          ? (key, value) => {
            value = noProtoReviver(key, value);
            return (value === undef) ? undef : reviver(key, value);
          }
          : noProtoReviver;
    return jsonParse(text, compositionOfRevivers);
  };
})();