Other nomination
What is prototype poisoning? Prototype bugs explained
Prototype poisoning happens when parsing user input lets a __proto__ key set the prototype of the object being built, replacing implicit members such as toString on that object and its children. Consequences include validation schema bypass, property and argument injection and denial of service; the post also separates poisoning from prototype pollution and hidden property abuse.
Record
- Researcher
- Christoffer Jerkeby
- Date
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Christoffer Jerkeby, first published at the original source. Preserved copies are kept so the citation survives its host.