add additional checks to the 'apply' and 'merge' functions to prevent prototype pollution