JavaScript Tutorial

Prototype Pollution

Security vulnerability where malicious input modifies Object.prototype.

// Vulnerable code:
JSON.parse('{ "__proto__": { "admin": true } }');
console.log({}.admin); // true