Writeups

Fools Mate, Revenge: When Configuration Becomes Code

A spoiler-conscious analysis of how unsafe object merging turns a harmless settings API into a prototype-pollution trust-boundary failure.