Web hacking techniques of 2021
The work on exploiting prototype pollution was excellent <a href="https://blog.s1r1us.ninja/research/PP" rel="nofollow">https://blog.s1r1us.ninja/research/PP</a><p>I didn’t know about the --disable-proto option in node or the Document Policy proposal for dealing with it.<p>Amazing that 80% of nested query parameter parsers were susceptible to prototype pollution.