I just published a write-up on prototype pollution and how it leads to XSS.
Uncategorized
1
Posts
1
Posters
7
Views
-
I just published a write-up on prototype pollution and how it leads to XSS.
The key idea: you’re not injecting into the sink—you’re controlling the property lookup that eventually reaches it.
Pollute → Gadget → Sink → Execution
Includes examples and common vulnerable patterns (merge functions, __proto__, etc.)
-
R relay@relay.infosec.exchange shared this topic
