`for in` loops should have a `hasOwnProperty` check