jQuery.each includes prototype functions

[agoebel]

I'm not entirely sure if this is deliberate or not, but the way jQuery handles the each method includes anything defined in the prototype.

Example:

Object.prototype.newMethod = function() {};
...
var keys = [],
    map = {
        'a': 1,
        'b': 2,
        'c': 3
    };

var 
jQuery.each( map, function(k,v) {
    keys.push(k);
};

the keys array has a value of:

['a','b','c','newMethod']

The change is pretty trivial. Simply add a hasOwnProperty filter to the object portion of the each method.

//starting from line 556
if ( isObj ) {
    for ( name in object ) {
        if ( !object.hasOwnProperty(name) ) {
            continue;
        }
        if ( callback.apply( object[ name ], args ) === false ) {
            break;
        }
    }
}

Using this code, keys is:

['a','b','c']

Which I personally think is what it should be. As an alternative, maybe a flag can be introduced to determine whether or not prototype values are filtered out.

The modified jquery-1.4.2 file is attached. I tested the example and patched code in firefox 3.6, chrome 4.0, and IE8.

[snover]

A user can use hasOwnProperty to filter out anything from the prototype that they want to already; this patch only limits the ability for users to decide whether or not they want to access prototype members too.