> identified not with a standard name (like Object.constructor() or Object.__proto__) __proto__ was a terrible mistake. Google “prototype pollution”; there are

> identified not with a standard name (like Object.constructor() or Object.__proto__) __proto__ was a terrible mistake. Google “prototype pollution”; there are too many examples to link. In a duck-typed language where the main mechanism for data deserialization is JSON.parse(), you can’t trust the value of any plain string key.