https://ind2x.github.io/posts/javascript_prototype_pollution/