BSCP

Burp Suite Certified Practitioner (BSCP)

Prototype PollutionEnglish
Exam overview

Practice session

In prototype pollution, an attacker injects the payload `?__proto__[isAdmin]=true` into a URL query string. Which JavaScript environment behavior makes this dangerous?

Loading your practice session…