JavaScript Tutorial ✦
Prototype Pollution
Security vulnerability where malicious input modifies Object.prototype.
// Vulnerable code:
JSON.parse('{ "__proto__": { "admin": true } }');
console.log({}.admin); // true
Security vulnerability where malicious input modifies Object.prototype.
// Vulnerable code:
JSON.parse('{ "__proto__": { "admin": true } }');
console.log({}.admin); // true