Research and Explore of Prototype Pollution Attack in Python
Ziyi Ouyang · 2023
With more and more enterprises and organizations moving their business infrastructure to the internet, the importance of software security vulnerabilities is increasingly prominent. In particular, as python is a popular programming language, research on its security is becoming increasingly important. The paper aims to discuss the prototype chain pollution vulnerability of python and carry out a detailed analysis. We introduce how the prototype chain works and explain how to construct a prototype chain pollution attack. We also analyze the real-world implications of this attack and investigate how prototype chain pollution attacks can be prevented. Finally, we summarize best practices regarding prototype chain pollution attacks and provide some guidance to help developers avoid this security problem.