---
id: 5469
title: "Widespread prototype pollution gadgets"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/widespread-prototype-pollution-gadgets"
published_at: "2022-10-28T13:04:00Z"
tags: ["web-security", "prototype-pollution", "dom-invader", "gadgets", "client-side", "javascript-apis"]
phying_url: "https://phying.com/item/5469"
lang: en
---

# Widespread prototype pollution gadgets

## Summary

Client-side prototype pollution gadgets in browser APIs: polluting Object.prototype can inject fetch bodies or defeat Object.defineProperty locks, with similar gadgets found across common libraries.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2022-10-28T13:04:00Z
- **Original:** https://portswigger.net/research/widespread-prototype-pollution-gadgets
- **Phying News:** https://phying.com/item/5469