I just published a write-up on prototype pollution and how it leads to XSS.The key idea: you’re not injecting into the sink—you’re controlling the property lookup that eventually reaches it.Pollute → Gadget → Sink → ExecutionIncludes examples and common vulnerable patterns (merge functions, __proto__, etc.)https://medium.com/@marduk.i.am/prototype-pollution-15f47d9e5c6a#Cybersecurity #WebSecurity #AppSec #Infosec #BugBounty