今日已更新 214 条资讯 | 累计 24500 条内容
关于我们

开发者

编程技术、框架工具、最佳实践

6806
篇文章

共 6806 篇 · 第 88/341 页

Dev.to

The Key That Unlocks Everything: Prototype Pollution in JavaScript

Imagine a hotel where every room key is cut from a master template. When a guest checks in, the front desk hands them a key that opens only their room. Simple enough. Now imagine a guest who, during check-in, sneaks a tiny modification into the key-cutting machine itself — changing the template so that every new key cut from that moment on also opens the manager's office, the safe, and the server room. The guest didn't break a lock. They didn't clone anyone's key. They changed the factory that makes all keys. That factory is JavaScript's Object.prototype . And the attack is called Prototype Pollution .

Khue Pham 2026-07-12 02:26 👁 7 查看原文 →