Bookmarks

JavaScript Prototype Poisoning Vulnerabilities in the Wild

Description of a nasty JS security bug. The key mitigation is to avoid custom Object deep clone implementations (and use a safe alternative like lodash)