Re:How JavaScript Works: deep dive into call, apply, and bind
by Sephr on Friday July 09, 2021 @08:46PM
(#27790102)
> This is to protect against hostile environments blocking function calls by polluting prototypes?
Correct. I go into more detail about into our problem space and use cases here: https://transcend.io/blog/defeating-cookie-banners
I do a lot of work on SDKs which run in semi-hostile environments, so prototype pollution is something I'm frequently running up against.