replaces the falsy check with a strict own-property check

  1. Inherited properties (toString, constructor, __proto__) from being treated as valid vhost entries
  2. The unvalidated dynamic method call warning, since we now explicitly verify the key is an own property of the configuration object before invoking it

Author: guimard

packages/handler/src/handlerMain.ts

@@ -254,7 +254,7 @@ class LemonldapNGHandler extends HandlerInit {
   ) {
     return new Promise<boolean>((resolve, reject) => {
       const vhost = this.resolveAlias(req);
-      if (!this.tsv.defaultCondition[vhost]) {
+      if (!Object.prototype.hasOwnProperty.call(this.tsv.defaultCondition, vhost)) {
         return reject(
           `No configuration found for ${vhost} (or not listed in Node.js virtualHosts)`,
         );