This vulnerability exists because JS code allows changing object prototypes at runtime (which is pretty unnecessary feature; in most cases we just need Java-lik

This vulnerability exists because JS code allows changing object prototypes at runtime (which is pretty unnecessary feature; in most cases we just need Java-like immutable classes). Because of this leaking an empty array into userland code becomes a vulnerability that is very difficult to spot.