4 ms·
Something like half of of reported JavaScript vulnerabilities are "prototype pollution" because It's very common practice to write to object keys blindly, using
by donatj 2y ago
Something like half of of reported JavaScript vulnerabilities are "prototype pollution" because It's very common practice to write to object keys blindly, using objects as a dictionary, without considering the implications.
It's a very similar exploit.
- baq 2y agoarguably worse, since no eval is needed...