sift-hardened

sift-hardened Drop-in replacement for sift 17.1.3 that remediates CVE-2026-85625. Not affiliated with crcn/sift.js. Changes from 17.1.3 Query keys are enumerated with Object.keys own properties only, so a polluted Object.prototype.$where is not treated as an operator. String $where values are...