Stop prototype pollution in a settings merge
Not solvedA deep merge applies user JSON to stored settings. One key reaches every object in the process. Make the merge safe.
- Level
- Advanced
- Estimated time
- ~30 min
- Points
- 0/70 pts
- Questions
- 0/0 answered
- OWASP
- A08:2025
- CWE
- CWE-1321
settings.js
Test results
Run the tests to check your code. It runs on the server in an isolated sandbox with no network access.