const payload = '{"constructor": {"prototype": {"lodash": true}}}'_.defaultsDeep({}, JSON.parse(payload)) if({}.lodash === true){ alert("Bad news :(\nYou're (still) vulnerable to Prototype Pollution") } else { alert("All Good! :)\nYou're NOT vulnerable (anymore) to Prototype Pollution") } VM57:1 Uncaught SyntaxError: Unexpected identifier '_' |