Merge pull request #11 from TremayneChrist/protection_improvements

Prevent access from other protected objects

protect.js

@@ -2,15 +2,15 @@
 
   'use strict';
 
-  var callDepth = 0; // Stores the call depth of the current execution
-
-  var locked = function () {
-    return !callDepth;
-  };
-
   // The protect object
   var protect = function (_O) {
 
+    var callDepth = 0; // Stores the call depth of the current execution
+
+    var locked = function () {
+      return !callDepth;
+    };
+
     var O = _O.prototype || _O; // Protect the prototype, if there is one
 
     Object.keys(O).forEach(function (key) {

tests/tests.js

@@ -112,6 +112,26 @@ describe('ProtectJS', function () {
       testObj._function = function () {};
       expect(testObj._function).to.be.undefined;
     });
+
+    it('Should NOT allow PRIVATE property access from other objects', function () {
+      var obj2 = {
+        fn: function () {
+          return testObj._function();
+        },
+        prop: function () {
+          return testObj._number + testObj._string;
+        }
+      };
+
+      // Unprotected
+      expect(obj2.fn).to.throw();
+      expect(obj2.prop()).to.be.NaN;
+
+      // Protected
+      protect(obj2);
+      expect(obj2.fn).to.throw();
+      expect(obj2.prop()).to.be.NaN;
+    });
   };
 
   describe('Literal Objects', function () {