I found yet another way to invoke JavaScript functions without parentheses

It turns out you can overwrite the Error.prepareStackTrace method with the function constructor. Then, using prototype pollution, you can inject valid JavaScript code to generate arbitrary functions and invoke it using the usual tricks. submitted by /u/DrAdalbbert [link] [comments]Technical Information Security Content & DiscussionRead More