~/talk

Prototype Pollution in JavaScript

watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/prototype-pollution-in-javascript
Talkat Node Congress 2023 · 2023-04-14..04-17· [security, javascript]

speaker

name:Vladimir de Turckheim
github:vdeturckheim

resources

video:https://portal.gitnation.org/contents/prototype-pollution-in-javascript
slides:none on file

summary

Explains prototype pollution in JavaScript, showing its impact through real-world vulnerabilities in Kibana and MongoDB and describing mitigation techniques like filtering merge functions and using defensive objects. Covers practical prevention measures — sanitization, validation, and static-analysis tools such as Semgrep — to detect and avoid prototype pollution attacks.

AI-written summary · about

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.