CS Fundamentals Trainer · JavaScript · Security

A naive recursive merge(target, source) copies every key of JSON.parse(body) into a plain object. Which payload does NOT add a property to…

A naive recursive `merge(target, source)` copies every key of `JSON.parse(body)` into a plain object. Which payload does NOT add a property to `Object.prototype`?

  1. `{"__proto__": {"isAdmin": true}}`
  2. `{"constructor": {"prototype": {"isAdmin": true}}}`
  3. `{"prototype": {"isAdmin": true}}`
  4. `{"a": {"__proto__": {"isAdmin": true}}}`

Difficulty: hard

Answer this question

Related questions