Skip to content

Instantly share code, notes, and snippets.

@changhuixu

changhuixu/prototype-pollution-2.ts

Created July 26, 2019 14:21
Show Gist options
  • Save changhuixu/fef748019eed61a870828ceb35410a26 to your computer and use it in GitHub Desktop.
Save changhuixu/fef748019eed61a870828ceb35410a26 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
prototype-pollution-2.ts
var userInput = JSON.parse('{"__proto__": {"admin": true}}')
var a = {...userInput}
console.log(a.admin)
// true
var b = Object.assign({}, userInput)
console.log(b.admin)
// true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment