Collected research
What is prototype poisoning? Prototype bugs explained
What is prototype poisoning? Prototype bugs explained!
Prototype poisoning happens when parsing user input lets a __proto__ key set the prototype of the object being built, replacing implicit members such as toString on that object and its children. Consequences include validation schema bypass, property and argument injection and denial of service; the post also separates poisoning from prototype pollution and hidden property abuse.
Record
- Document
- What is prototype poisoning? Prototype bugs explained!
- Researcher
- Christoffer Jerkeby
- Published by
- jerkeby.se
- Date
- Topic
- Other
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Christoffer Jerkeby, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .