Skip to content
Widespread prototype pollution gadgets
portswigger.net | research | #web-security | #prototype-pollution | #dom-invader | #gadgets | #client-side | #javascript-apis
Summary
Client-side prototype pollution gadgets in browser APIs: polluting Object.prototype can inject fetch bodies or defeat Object.defineProperty locks, with similar gadgets found across common libraries.
- Published
- Collected