Prototype Pollution, Web Pen Testing, Burpsuite, Penetration Testing.
pollute the global Object.prototype with an arbitrary property as follows: POST /user/update HTTP/1.1 Host: vulnerable-website.com ... { "user":"wiener", "firstName":"Peter", "lastName":"Wiener", "__proto__":{ "foo":"bar" } } If the website is vulnerable, your injected property would then appear in