The Burp Suite User Forum will be discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Centre. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTRE DISCORD

Create new post

Server-side prototype pollution materials

Filip | Last updated: Jun 10, 2024 07:06PM UTC

Hi, I am going over the materials on server-side prototype pollution, and I noticed a bug. Specifically, in the `Status code override` section and the code snippet showing the `createError` function. ``` if (!statuses.message[status] && (status > 400 || status >= 600))) { status = 500 } ``` Shouldn't this be status < 400?

Hannah, PortSwigger Agent | Last updated: Jun 11, 2024 10:35AM UTC

Hi Thanks for raising this with us! This is a typo, and we're in the process of getting this sorted. If you check out the research paper, it has it the correct way round: https://portswigger.net/research/server-side-prototype-pollution#status

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.